Lucene search
GoogleOSV:GHSA-4QVX-QQ5W-695PHistoryMay 14, 2022 - 1:36 a.m.
HashiCorp Consul can use cleartext agent-to-agent RPC communication
2022-05-1401:36:20
Google
osv.dev
12
0.001 Low
EPSS
Percentile
49.8%
HashiCorp Consul 0.5.1 through 1.4.0 can use cleartext agent-to-agent RPC communication because the verify_outgoing setting is improperly documented. NOTE: the vendor has provided reconfiguration steps that do not require a software upgrade.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/hashicorp/consul | ge | 0.5.1 | |
| github.com/hashicorp/consul | lt | 1.4.1 |
Related
veracode
veracode
Man-in-the-Middle (MitM)
2018-12-10 02:32:27
debiancve
debiancve
CVE-2018-19653
2018-12-09 19:29:00
cgr
cgr
CVE-2018-19653 vulnerabilities
2024-05-19 03:07:16
osv
osv
CVE-2018-19653
2018-12-09 19:29:00
wolfi
wolfi
CVE-2018-19653 vulnerabilities
2024-07-05 21:08:40
github
github
HashiCorp Consul can use cleartext agent-to-agent RPC communication
2022-05-14 01:36:20
nvd
nvd
CVE-2018-19653
2018-12-09 19:29:00
prion
prion
Design/Logic Flaw
2018-12-09 19:29:00
cve
cve
CVE-2018-19653
2018-12-09 19:29:00
cvelist
cvelist
CVE-2018-19653
2018-12-09 19:00:00
ubuntucve
ubuntucve
CVE-2018-19653
2018-12-09 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2019-0017
2019-06-06 00:00:00
Important Photon OS Security Update - PHSA-2019-3.0-0017
2019-06-06 00:00:00
Critical Photon OS Security Update - PHSA-2023-5.0-0045
2023-07-05 00:00:00
ibm
ibm
Security Bulletin: Open Source Dependency Vulnerability
2023-05-15 18:49:23