| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/hashicorp/consul | < 1.10.1 | 1.10.1 |
| consul | ≥ 1.10.0, < 1.10.1≥ 1.9.0, < 1.9.8 | 1.10.11.9.8 |
In HashiCorp Consul before 1.10.1 (and Consul Enterprise), xds can generate a situation where a single L7 deny intention (with a default deny policy) results in an allow action.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free