HashiCorp Consul can use cleartext agent-to-agent RPC communication

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2018-19653 · ADVISORY
• hashicorp/consul#5069 · WEB
• hashicorp/consul commit b64e8b2 · WEB
• hashicorp/consul · PACKAGE
• groups.google.com/forum · WEB
• groups.google.com/forum
• GitHub Advisory GHSA-4qvx-qq5w-695p · ADVISORY

github.com/hashicorp/consul のその他の脆弱性

• CVE-2026-2808中 6.8HashiCorp Consul and Consul Enterprise 1.18.20 up to 1.21.10 and 1.22.4 are vulnerable to arbitrary file read when configured with Kubernete…
• CVE-2025-11375中 6.5Consul and Consul Enterprise’s (“Consul”) event endpoint is vulnerable to denial of service (DoS) due to lack of maximum value on the Conten…
• CVE-2025-11374中 6.5Consul and Consul Enterprise’s (“Consul”) key/value endpoint is vulnerable to denial of service (DoS) due to incorrect Content Length header…
• CVE-2024-10086中 6.1A vulnerability was identified in Consul and Consul Enterprise such that the server response did not explicitly set a Content-Type HTTP head…
• CVE-2024-10006中 5.8A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using Headers in L7 traffic intentions could bypass HTTP…