consul vulnerabilities (Ubuntu)
49 vulnerabilities.
-
consulUbuntu Consul vulnerable to an authorization bypass in health check registration 6.4 Medium -
consulUbuntu Consul vulnerable to a denial of service in HTTP APIs 7.5 High -
consulUbuntu Consul vulnerable to an authorization bypass in service mesh registration 8.8 High -
consulUbuntu Consul vulnerable to an authorization bypass in the agent's service mesh leaf certificate API 7.5 High -
consulUbuntu Fabio - Incomplete fix for CVE-2025-48865: operator-configured trust headers (clientip/tls/requestid) still strippable via the Connection header 5.8 Medium -
consulUbuntu Consul vulnerable to an authorization bypass in the Connect service mesh 7.5 High -
consulUbuntu Consul vulnerable to an authorization bypass in the catalog deregistration path 5.4 Medium -
consulUbuntu Consul vulnerable to a denial of service in the native RPC listener 6.5 Medium -
consulUbuntu Consul vulnerable to an authorization bypass in the catalog node-write path 8.3 High -
consulUbuntu Unauthenticated denial of service via unbounded request body processing 5.3 Medium -
consulUbuntu Unauthenticated denial of service via unbounded external gRPC connection acceptance 7.5 High -
consulUbuntu L7 intention authorization bypass via custom public listener 4.2 Medium -
consulUbuntu Consul vulnerable to partial arbitrary file read via Vault Connect CA provider 6.8 Medium -
consulUbuntu Uncontrolled resource consumption in the Consul Connect CA roots endpoint 5.3 Medium -
consulUbuntu Uncontrolled resource consumption in the Consul Connect authorization endpoint 4.3 Medium -
consulUbuntu Authenticated denial of service in Consul Enterprise-to-Community Edition downgrade path 5.3 Medium -
consulUbuntu Authorization bypass for session deletion in the transaction API 4.2 Medium -
consulUbuntu Consul vulnerable to arbitrary file reads through the vault kubernetes authentication provider 6.8 Medium -
consulUbuntu Consul's KV endpoint is vulnerable to denial of service 6.5 Medium -
consulUbuntu Consul's event endpoint is vulnerable to denial of service 6.5 Medium -
consulUbuntu Consul Vulnerable To Reflected XSS On Content-Type Error Manipulation 6.1 Medium -
consulUbuntu Consul L7 Intentions Vulnerable To Headers Bypass 8.3 High -
consulUbuntu Consul L7 Intentions Vulnerable To URL Path Bypass 8.1 High -
consulUbuntu Dependency on Vulnerable Third-Party Component in GitLab 5.9 Medium -
consulUbuntu Consul Cluster Peering can Result in Denial of Service 4.9 Medium -
consulUbuntu Consul Envoy Extension Downsteam Proxy Configuration By Upstream Service Owner 8.7 High -
consulUbuntu Consul Server Panic when Ingress and API Gateways Configured with Peering 4.9 Medium -
consulUbuntu Consul Peering Imported Nodes/Services Leak 5.3 Medium -
consulUbuntu HashiCorp Consul vulnerable to authorization bypass 6.5 Medium -
consulUbuntu HashiCorp Consul does not properly validate node or segment names prior to usage in JWT claim assertions 7.1 High -
consulUbuntu Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector 7.5 High -
consulUbuntu HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers 6.5 Medium -
consulUbuntu HashiCorp Consul Enterprise before 1.8.17, 1.9.x before 1.9.11, and 1.10.x before 1.10.4 has... 8.8 High -
consulUbuntu HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. 6.5 Medium -
consulUbuntu HashiCorp Consul Privilege Escalation Vulnerability 8.8 High -
consulUbuntu HashiCorp Consul L7 deny intention results in an allow action 7.5 High -
consulUbuntu Hashicorp Consul Missing SSL Certificate Validation 7.5 High -
consulUbuntu HashiCorp Consul Enterprise version 1.8.0 up to 1.9.4 audit log can be bypassed by specifically... 7.5 High -
consulUbuntu HashiCorp Consul Cross-site Scripting vulnerability 6.1 Medium -
consulUbuntu Privilege Escalation in HashiCorp Consul 6.5 Medium -
consulUbuntu Denial of service in HashiCorp Consul 7.5 High -
consulUbuntu Improper Input Validation in HashiCorp Consul 7.5 High -
consulUbuntu Incorrect Permission Assignment for Critical Resource in Hashicorp Consul 5.3 Medium -
consulUbuntu Allocation of Resources Without Limits or Throttling in Hashicorp Consul 7.5 High -
consulUbuntu Denial of Service (DoS) in HashiCorp Consul 7.5 High -
consulUbuntu Incorrect Authorization in HashiCorp Consul 5.3 Medium -
consulUbuntu HashiCorp Consul Incorrect Access Control vulnerability 7.5 High -
consulUbuntu HashiCorp Consul vulnerable to Origin Validation Error 7.4 High -
consulUbuntu HashiCorp Consul can use cleartext agent-to-agent RPC communication 5.9 Medium