Hashicorp Consul 1.12.0

CPE Details

Hashicorp Consul 1.12.0
hashicorp
consul
1.12.0
2022-09-26
13h43 +00:00
2022-09-28
17h52 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:hashicorp:consul:1.12.0:*:*:*:-:*:*:*

Informations

Vendor

hashicorp

Product

consul

Version

1.12.0

Software Edition

-

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2023-0845 2023-03-09 15h14 +00:00 Consul and Consul Enterprise allowed an authenticated user with service:write permissions to trigger a workflow that causes Consul server and client agents to crash under certain circumstances. This vulnerability was fixed in Consul 1.14.5.
6.5
Medium
CVE-2022-40716 2022-09-22 22h00 +00:00 HashiCorp Consul and Consul Enterprise up to 1.11.8, 1.12.4, and 1.13.1 do not check for multiple SAN URI values in a CSR on the internal RPC endpoint, enabling leverage of privileged access to bypass service mesh intentions. Fixed in 1.11.9, 1.12.5, and 1.13.2."
6.5
Medium