CVE-2024-10005
Consul L7 Intentions Vulnerable To URL Path Bypass
Summary
Consul L7 Intentions Vulnerable To URL Path Bypass
Original description
The description as published by the source.
A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using URL paths in L7 traffic intentions could bypass HTTP request path-based access rules.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
consul
[{"type":"SEMVER","events":[{"introduced":"1.9.0"},{"fixed":"1.20.1"}]}]
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2024-10005 consul
References
- advisory discuss.hashicorp.com
- web security.netapp.com
- web nvd.nist.gov