consul vulnerabilities (Debian)
33 vulnerabilities.
-
consulDebian Unauthenticated denial of service via unbounded request body processing 5.3 Medium -
consulDebian Unauthenticated denial of service via unbounded external gRPC connection acceptance 7.5 High -
consulDebian L7 intention authorization bypass via custom public listener 4.2 Medium -
consulDebian Consul vulnerable to partial arbitrary file read via Vault Connect CA provider 6.8 Medium -
consulDebian Uncontrolled resource consumption in the Consul Connect CA roots endpoint 5.3 Medium -
consulDebian Uncontrolled resource consumption in the Consul Connect authorization endpoint 4.3 Medium -
consulDebian Authenticated denial of service in Consul Enterprise-to-Community Edition downgrade path 5.3 Medium -
consulDebian Authorization bypass for session deletion in the transaction API 4.2 Medium -
consulDebian Consul vulnerable to arbitrary file reads through the vault kubernetes authentication provider 6.8 Medium -
consulDebian Consul's KV endpoint is vulnerable to denial of service 6.5 Medium -
consulDebian Consul's event endpoint is vulnerable to denial of service 6.5 Medium -
consulDebian Consul Vulnerable To Reflected XSS On Content-Type Error Manipulation 6.1 Medium -
consulDebian Consul L7 Intentions Vulnerable To Headers Bypass 8.3 High -
consulDebian Consul L7 Intentions Vulnerable To URL Path Bypass 8.1 High -
consulDebian Dependency on Vulnerable Third-Party Component in GitLab 5.9 Medium -
consulDebian HashiCorp Consul vulnerable to authorization bypass 6.5 Medium -
consulDebian HashiCorp Consul does not properly validate node or segment names prior to usage in JWT claim assertions 7.1 High -
consulDebian Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector 7.5 High -
consulDebian HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers 6.5 Medium -
consulDebian HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. 6.5 Medium -
consulDebian HashiCorp Consul Privilege Escalation Vulnerability 8.8 High -
consulDebian Hashicorp Consul Missing SSL Certificate Validation 7.5 High -
consulDebian HashiCorp Consul Cross-site Scripting vulnerability 6.1 Medium -
consulDebian Privilege Escalation in HashiCorp Consul 6.5 Medium -
consulDebian Denial of service in HashiCorp Consul 7.5 High -
consulDebian Improper Input Validation in HashiCorp Consul 7.5 High -
consulDebian Incorrect Permission Assignment for Critical Resource in Hashicorp Consul 5.3 Medium -
consulDebian Denial of Service (DoS) in HashiCorp Consul 7.5 High -
consulDebian Allocation of Resources Without Limits or Throttling in Hashicorp Consul 7.5 High -
consulDebian Denial of Service (DoS) in HashiCorp Consul 7.5 High -
consulDebian Incorrect Authorization in HashiCorp Consul 5.3 Medium -
consulDebian HashiCorp Consul Incorrect Access Control vulnerability 7.5 High -
consulDebian HashiCorp Consul can use cleartext agent-to-agent RPC communication 5.9 Medium