Lucene search
PRIOn knowledge basePRION:CVE-2022-40716HistorySep 23, 2022 - 12:15 p.m.
Design/Logic Flaw
2022-09-2312:15:00
PRIOn knowledge base
www.prio-n.com
8
hashicorp
consul
consul enterprise
san uri
csr
privileged access
service mesh intentions
HashiCorp Consul and Consul Enterprise up to 1.11.8, 1.12.4, and 1.13.1 do not check for multiple SAN URI values in a CSR on the internal RPC endpoint, enabling leverage of privileged access to bypass service mesh intentions. Fixed in 1.11.9, 1.12.5, and 1.13.2."
References
discuss.hashicorp.com
discuss.hashicorp.com/t/hcsec-2022-20-consul-service-mesh-intention-bypass-with-malicious-certificate-signing-request/44628
lists.fedoraproject.org/archives/list/[email protected]/message/LYZOKMMVX4SIEHPJW3SJUQGMO5YZCPHC/
lists.fedoraproject.org/archives/list/[email protected]/message/XNF4OLYZRQE75EB5TW5N42FSXHBXGWFE/
lists.fedoraproject.org/archives/list/[email protected]/message/ZTE4ITXXPIWZEQ4HYQCB6N6GZIMWXDAI/
Related
alpinelinux
alpinelinux
CVE-2022-40716
2022-09-23 12:15:10
cgr
cgr
CVE-2022-40716 vulnerabilities
2024-05-19 03:07:16
nvd
nvd
CVE-2022-40716
2022-09-23 12:15:10
ubuntucve
ubuntucve
CVE-2022-40716
2022-09-23 00:00:00
osv
osv
HashiCorp Consul vulnerable to authorization bypass
2022-09-25 00:00:27
CVE-2022-40716
2022-09-23 12:15:10
BIT-consul-2022-40716
2024-03-06 10:51:50
cvelist
cvelist
CVE-2022-40716
2022-09-23 00:00:00
debiancve
debiancve
CVE-2022-40716
2022-09-23 12:15:10
cve
cve
CVE-2022-40716
2022-09-23 12:15:10
veracode
veracode
Authentication Bypass
2022-09-27 13:08:32
wolfi
wolfi
CVE-2022-40716 vulnerabilities
2024-07-06 03:08:40
redhatcve
redhatcve
CVE-2022-40716
2022-12-29 04:04:50
github
github
HashiCorp Consul vulnerable to authorization bypass
2022-09-25 00:00:27
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0373
2023-04-10 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0587
2023-05-26 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0538
2023-02-26 00:00:00
openvas
openvas
Fedora: Security Advisory for moby-engine (FEDORA-2023-9f5f1ef40a)
2023-08-30 00:00:00
Fedora: Security Advisory for moby-engine (FEDORA-2023-b9c1d0e4c5)
2023-09-16 00:00:00
Fedora: Security Advisory for moby-engine (FEDORA-2023-cf3551046d)
2023-09-05 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: moby-engine-24.0.5-1.fc37
2023-09-05 00:47:54
[SECURITY] Fedora 38 Update: moby-engine-24.0.5-1.fc38
2023-08-30 01:37:37
[SECURITY] Fedora 39 Update: moby-engine-24.0.5-1.fc39
2023-09-15 19:03:15
nessus
nessus
Fedora 37 : moby-engine (2023-cf3551046d)
2023-09-05 00:00:00
Fedora 38 : moby-engine (2023-9f5f1ef40a)
2023-08-30 00:00:00
Fedora 39 : moby-engine (2023-b9c1d0e4c5)
2023-11-07 00:00:00
ibm
ibm
Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs
2023-07-03 18:48:48