GHSA-6hw5-6gcx-phmw

Source

https://github.com/advisories/GHSA-6hw5-6gcx-phmw

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/09/GHSA-6hw5-6gcx-phmw/GHSA-6hw5-6gcx-phmw.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-6hw5-6gcx-phmw

Aliases

Related

Published

2021-09-08T20:14:56Z

Modified

2024-08-21T15:41:56.286405Z

Severity

6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Summary

HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic.

Details

HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. Fixed in 1.8.15, 1.9.9 and 1.10.2.

Database specific

{
    "nvd_published_at": "2021-09-07T12:15:00Z",
    "github_reviewed_at": "2021-09-08T18:12:00Z",
    "severity": "MODERATE",
    "github_reviewed": true,
    "cwe_ids": [
        "CWE-862",
        "CWE-863"
    ]
}

References