ALPINE-CVE-2022-3920

Source
https://security.alpinelinux.org/vuln/CVE-2022-3920
Import Source
https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-3920.json
JSON Data
https://api.osv.dev/v1/vulns/ALPINE-CVE-2022-3920
Upstream
Published
2022-11-16T00:15:09Z
Modified
2026-11-03T07:30:39Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

HashiCorp Consul and Consul Enterprise 1.13.0 up to 1.13.3 do not filter cluster filtering's imported nodes and services for HTTP or RPC endpoints used by the UI. Fixed in 1.14.0.

References

Affected packages

Alpine:v3.17 / consul

Package

Name
consul
Purl
pkg:apk/alpine/consul?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.13.0
Fixed
1.14.1-r0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-3920.json"

Alpine:v3.18 / consul

Package

Name
consul
Purl
pkg:apk/alpine/consul?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.13.0
Fixed
1.14.1-r0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-3920.json"