consul vulnerabilities (Bitnami)
52 vulnerabilities.
-
consulBitnami Consul-template vulnerable to an information disclosure issue in error handling 7.7 High -
consulBitnami Consul vulnerable to an authorization bypass in the Connect service mesh 7.5 High -
consulBitnami Consul vulnerable to an authorization bypass in the catalog deregistration path 5.4 Medium -
consulBitnami Consul vulnerable to a denial of service in the native RPC listener 6.5 Medium -
consulBitnami Consul vulnerable to an authorization bypass in the catalog node-write path 8.3 High -
consulBitnami Vault Secrets Operator vulnerable to arbitrary file read and credential exfiltration via AppRole secretIDPath 9.6 Critical -
consulBitnami Unauthenticated denial of service via unbounded request body processing 5.3 Medium -
consulBitnami Unauthenticated denial of service via unbounded external gRPC connection acceptance 7.5 High -
consulBitnami L7 intention authorization bypass via custom public listener 4.2 Medium -
consulBitnami Consul vulnerable to partial arbitrary file read via Vault Connect CA provider 6.8 Medium -
consulBitnami Uncontrolled resource consumption in the Consul Connect CA roots endpoint 5.3 Medium -
consulBitnami Uncontrolled resource consumption in the Consul Connect authorization endpoint 4.3 Medium -
consulBitnami Authenticated denial of service in Consul Enterprise-to-Community Edition downgrade path 5.3 Medium -
consulBitnami Authorization bypass for session deletion in the transaction API 4.2 Medium -
consulBitnami consul-mcp-server vulnerable to cross-tenant credential reuse in streamable-HTTP stateless mode 10.0 Critical -
consulBitnami consul-mcp-server vulnerable to server side request forgery leading to token exposure 8.6 High -
consulBitnami terraform-mcp-server vulnerable to cross-tenant credential reuse in streamable-HTTP stateless mode 10.0 Critical -
consulBitnami terraform-mcp-server vulnerable to cross-user credential inheritance if an MCP session ID is obtained by another user 8.9 High -
consulBitnami terraform-mcp-server vulnerable to server side request forgery leading to token exposure 8.6 High -
consulBitnami Consul-template vulnerable to sandbox path bypass in file helper via a symlink attack 4.7 Medium -
consulBitnami Consul vulnerable to arbitrary file reads through the vault kubernetes authentication provider 6.8 Medium -
consulBitnami Consul's KV endpoint is vulnerable to denial of service 6.5 Medium -
consulBitnami Consul's event endpoint is vulnerable to denial of service 6.5 Medium -
consulBitnami Consul Vulnerable To Reflected XSS On Content-Type Error Manipulation 6.1 Medium -
consulBitnami Consul L7 Intentions Vulnerable To Headers Bypass 8.3 High -
consulBitnami Consul L7 Intentions Vulnerable To URL Path Bypass 8.1 High -
consulBitnami Dependency on Vulnerable Third-Party Component in GitLab 5.9 Medium -
consulBitnami JWT Auth in L7 Intentions Allow For Mismatched Service Identity and JWT Providers for Access 7.4 High -
consulBitnami Consul Cluster Peering can Result in Denial of Service 4.9 Medium -
consulBitnami Consul Envoy Extension Downsteam Proxy Configuration By Upstream Service Owner 8.7 High -
consulBitnami Consul Server Panic when Ingress and API Gateways Configured with Peering 4.9 Medium -
consulBitnami Consul Peering Imported Nodes/Services Leak 5.3 Medium -
consulBitnami HashiCorp Consul vulnerable to authorization bypass 6.5 Medium -
consulBitnami HashiCorp Consul does not properly validate node or segment names prior to usage in JWT claim assertions 7.1 High -
consulBitnami Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector 7.5 High -
consulBitnami HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers 6.5 Medium -
consulBitnami HashiCorp Consul Enterprise before 1.8.17, 1.9.x before 1.9.11, and 1.10.x before 1.10.4 has... 8.8 High -
consulBitnami HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. 6.5 Medium -
consulBitnami HashiCorp Consul Privilege Escalation Vulnerability 8.8 High -
consulBitnami HashiCorp Consul L7 deny intention results in an allow action 7.5 High -
consulBitnami Hashicorp Consul Missing SSL Certificate Validation 7.5 High -
consulBitnami HashiCorp Consul Enterprise version 1.8.0 up to 1.9.4 audit log can be bypassed by specifically... 7.5 High -
consulBitnami HashiCorp Consul Cross-site Scripting vulnerability 6.1 Medium -
consulBitnami Improper Input Validation in GoGo Protobuf 8.6 High -
consulBitnami Privilege Escalation in HashiCorp Consul 6.5 Medium -
consulBitnami Denial of service in HashiCorp Consul 7.5 High -
consulBitnami Improper Input Validation in HashiCorp Consul 7.5 High -
consulBitnami Incorrect Permission Assignment for Critical Resource in Hashicorp Consul 5.3 Medium -
consulBitnami Denial of Service (DoS) in HashiCorp Consul 7.5 High -
consulBitnami Allocation of Resources Without Limits or Throttling in Hashicorp Consul 7.5 High - Show olderLoading…