Skip to content
CVE PROGRAM SOURCE RECORD8.3 High

CVE-2024-10006

Consul L7 Intentions Vulnerable To Headers Bypass

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
HashiCorp

Description

A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using Headers in L7 traffic intentions could bypass HTTP header based access rules.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HashiCorp Consul

Default version status: unaffected

  • 1.9.0 to < 1.20.1affected

HashiCorp Consul Enterprise

Default version status: unaffected

  • 1.9.0 to < 1.20.1affected

References