Topics tagged security-consul

Topic	Replies	Views	Activity
HCSEC-2021-24 - Consul Missing Authorization Check on Txn.Apply Endpoint Security security-consul	0	553	September 1, 2021
HCSEC-2021-23 - Consul Exposed to Denial of Service in GoGo Protobuf Dependency Security security-consul	0	423	September 1, 2021
HCSEC-2021-22 - Consul Raft RPC Privilege Escalation Security security-consul	0	690	September 1, 2021
HCSEC-2021-17 - Consul’s Envoy TLS Configuration Did Not Validate Destination Service Subject Alternative Names Security security-consul	0	584	July 15, 2021
HCSEC-2021-16 Consul’s Application-Aware Intentions Deny Action Fails Open When Combined With Default Deny Policy Security security-consul	0	524	July 15, 2021
HCSEC-2021-12 - Codecov Security Event and HashiCorp GPG Key Exposure Security security-nomad , security-consul , security-vault , security-terraform	2	41896	May 4, 2021
HCSEC-2020-22 - Consul Operator Read ACL Enables Connect Service Masquerading Security security-consul	0	503	November 25, 2020
HCSEC-2021-08 - Consul Enterprise Audit Log Bypass for HTTP Events Security security-consul	0	802	April 19, 2021
HCSEC-2021-07 - Consul API KV Endpoint Vulnerable to Cross-Site Scripting Security security-consul	0	904	April 19, 2021
HCSEC-2020-19 - Consul Enterprise Namespace Config Entry Replication Denial of Service Security security-consul	0	458	November 25, 2020
HCSEC2020-14 - Consul DNS and HTTP Cache Abuse Denial of Service Security security-consul	0	460	November 25, 2020
HCSEC-2020-12 - Consul Local ACL Token Can Be Used in Remote Datacenters Security security-consul	0	430	November 25, 2020
HCSEC-2020-11 - Consul Legacy ACL Permission Changes Not Propagated to Secondary Datacenters Security security-consul	0	421	November 25, 2020
HCSEC-2020-10 - Consul Server Crash With Invalid Service-Router Config Entry Security security-consul	0	407	November 25, 2020
HCSEC-2020-04 - Consul's Health Check API Endpoints May Disclose Information Security security-consul	0	425	November 25, 2020
HCSEC-2020-02 - Consul’s HTTP/RPC Services Allow Unbounded Resource Usage, Susceptible to Unauthenticated Denial of Service Security security-consul	0	453	November 25, 2020