Database/Control plane, storage & DevOps
HashiCorp Consul: Internal RPC endpoint does not check multiple SAN URIs in a CSR
CVSS 6.5CVE-2022-40716Control plane, storage & DevOpscurated
Impact
Internal RPC endpoint does not check multiple SAN URIs in a CSR -> bypass service-mesh intentions
Who can reach it
Network (remote)
What to do
Control-plane: Consul server upgrade then clients; re-verify mesh intentions
References
Related entries
- HashiCorp Consul: Missing Content-Type header lets user input be reinterpretedCVE-2024-10086 · HashiCorp ConsulMedium
- AMD IOMMU - not re-initialized during DRTM (AMD-SB-3003): The IOMMU is not re-initialized during a Dynamic Root ofCVE-2023-20591 · AMD IOMMU - not re-initialized during DRTM (AMD-SB-3003)Medium
- Netdata: Agent MACHINE GUID is readable and reusableCVE-2023-22497 · NetdataMedium
- Apache Guacamole: Miscalculated instruction lengths during the Guacamole handshakeCVE-2023-30575 · Apache GuacamoleMedium
- Elasticsearch: Crafted _search query stringCVE-2023-31419 · ElasticsearchMedium
- Argo CD: repo-server extracts a user-controlled tar.gz without size validationCVE-2023-40584 · Argo CDMedium
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.