GHSA-4qvx-qq5w-695pMediumCVSS 5.9

HashiCorp Consul can use cleartext agent-to-agent RPC communication

Published
May 14, 2022
Last Modified
June 9, 2023

🔗 CVE IDs covered (1)

CVE-2018-19653 →

📋 Description

HashiCorp Consul 0.5.1 through 1.4.0 can use cleartext agent-to-agent RPC communication because the verify_outgoing setting is improperly documented. NOTE: the vendor has provided reconfiguration steps that do not require a software upgrade.

🎯 Affected products1

  • go/github.com/hashicorp/consul:>= 0.5.1, < 1.4.1

🔗 References (5)