AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

ConsulGHSA-rqjq-ww83-wv5c

Hashicorp Consul allows user with service:write permissions to patch remote proxy instances

Consul

CVE-2023-2816 · Published Jun 3, 2023 · updated Aug 20, 2024

High8.7
Fix: upgrade to 1.15.3 or later
GitHub advisory

Consul and Consul Enterprise allowed any user with service:write permissions to use Envoy extensions configured via service-defaults to patch remote proxy instances that target the configured service, regardless of whether the user has permission to modify the service(s) corresponding to those modified proxies.

Affected versions

PackageAffectedFixed in
github.com/hashicorp/consul
Go
>= 1.15.0, < 1.15.31.15.3
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
Severity from
GitHub (reviewed advisory)
Weakness
CWE-266
Also known as
BIT-consul-2023-2816, CVE-2023-2816, GO-2023-1828

More Consul advisories

All Consul
High 7.5Jan 31, 2024Denial of service in HashiCorp ConsulCVE-2020-25201fixed in 1.7.9 +1High 7.4Aug 9, 2023Consul JWT Auth in L7 Intentions Allow for Mismatched Service Identity and JWT ProvidersCVE-2023-3518fixed in 1.16.1High 7.5Jun 9, 2023HashiCorp Consul Incorrect Access Control vulnerabilityCVE-2019-12291fixed in 1.5.1Medium 4.9Jun 3, 2023Hashicorp Consul vulnerable to denial of serviceCVE-2023-1297fixed in 1.14.5 +1Medium 6.5Mar 9, 2023Consul Server Panic when Ingress and API Gateways Configured with Peering ConnectionsCVE-2023-0845fixed in 1.14.5High 7.5Nov 16, 2022Missing Authorization in HashiCorp ConsulCVE-2022-3920fixed in 1.14.0