Advisories · Technology
HashiCorp Consul Enterprise.
Every CVE that names HashiCorp Consul Enterprise among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.4 Medium
Consul vulnerable to an authorization bypass in health check registration
- HashiCorp Consul
- HashiCorp Consul Enterprise
- Broken access control
- CVSS 7.5 High
Consul vulnerable to a denial of service in HTTP APIs
- HashiCorp Consul
- HashiCorp Consul Enterprise
- Denial of service
- CVSS 8.8 High
Consul vulnerable to an authorization bypass in service mesh registration
- HashiCorp Consul
- HashiCorp Consul Enterprise
- CWE-178
- CVSS 7.5 High
Consul vulnerable to an authorization bypass in the agent's service mesh leaf certificate API
- HashiCorp Consul
- HashiCorp Consul Enterprise
- Broken access control
- CVSS 7.5 High
Consul vulnerable to an authorization bypass in the Connect service mesh
- HashiCorp Consul
- HashiCorp Consul Enterprise
- CWE-185
- CVSS 5.4 Medium
Consul vulnerable to an authorization bypass in the catalog deregistration path
- HashiCorp Consul
- HashiCorp Consul Enterprise
- Broken access control
- CVSS 6.5 Medium
Consul vulnerable to a denial of service in the native RPC listener
- HashiCorp Consul
- HashiCorp Consul Enterprise
- Denial of service
- CVSS 8.3 High
Consul vulnerable to an authorization bypass in the catalog node-write path
- HashiCorp Consul
- HashiCorp Consul Enterprise
- Broken access control
- CVSS 5.3 Medium
Unauthenticated denial of service via unbounded request body processing
- HashiCorp Consul
- HashiCorp Consul Enterprise
- Denial of service
- CVSS 7.5 High
Unauthenticated denial of service via unbounded external gRPC connection acceptance
- HashiCorp Consul
- HashiCorp Consul Enterprise
- Denial of service
- CVSS 4.2 Medium
L7 intention authorization bypass via custom public listener
- HashiCorp Consul
- HashiCorp Consul Enterprise
- CWE-647
- CVSS 6.8 Medium
Consul vulnerable to partial arbitrary file read via Vault Connect CA provider
- HashiCorp Consul
- HashiCorp Consul Enterprise
- Broken access control
- CVSS 5.3 Medium
Uncontrolled resource consumption in the Consul Connect CA roots endpoint
- HashiCorp Consul
- HashiCorp Consul Enterprise
- Denial of service
- CVSS 4.3 Medium
Uncontrolled resource consumption in the Consul Connect authorization endpoint
- HashiCorp Consul
- HashiCorp Consul Enterprise
- Denial of service
- CVSS 5.3 Medium
Authenticated denial of service in Consul Enterprise-to-Community Edition downgrade path
- HashiCorp Consul
- HashiCorp Consul Enterprise
- Memory corruption
- CVSS 4.2 Medium
Authorization bypass for session deletion in the transaction API
- HashiCorp Consul
- HashiCorp Consul Enterprise
- Path traversal