Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2024-10005

Consul L7 Intentions Vulnerable To URL Path Bypass

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
HashiCorp

Description

A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using URL paths in L7 traffic intentions could bypass HTTP request path-based access rules.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HashiCorp Consul

Default version status: unaffected

  • 1.9.0 to < 1.20.1affected

HashiCorp Consul Enterprise

Default version status: unaffected

  • 1.9.0 to < 1.20.1affected

References