Hashicorp Consul Sårbarheter

Tidslinje

Version

1.9.0	6
1.9.1	6
1.9.2	6
1.9.3	6
1.9.4	6

Åtgärd

Official Fix	24
Temporary Fix	0
Workaround	1
Unavailable	0
Not Defined	4

Utnyttjbarhet

High	0
Functional	0
Proof-of-Concept	0
Unproven	0
Not Defined	29

Åtkomstvektor

Not Defined	0
Physical	0
Local	0
Adjacent	11
Network	18

Autentisering

Not Defined	0
High	2
Low	14
None	13

Användarinteraktion

Not Defined	0
Required	1
None	28

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	2
≤5	4
≤6	11
≤7	9
≤8	2
≤9	0
≤10	1

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	2
≤5	5
≤6	12
≤7	8
≤8	1
≤9	0
≤10	1

VulDB

≤1	0
≤2	0
≤3	1
≤4	5
≤5	3
≤6	15
≤7	1
≤8	3
≤9	0
≤10	1

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	3
≤7	4
≤8	12
≤9	1
≤10	1

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	1
≤6	1
≤7	0
≤8	1
≤9	1
≤10	0

Säljare

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Utnyttja 0-dagars

<1k	6
<2k	19
<5k	4
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Utnyttja idag

<1k	29
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Affected Versions (88): 0.29, 0.29.1, 1.0, 1.1, 1.2, 1.3, 1.4, 1.4.1, 1.4.2, 1.4.3, 1.5, 1.6, 1.6.1, 1.6.2, 1.6.3, 1.6.4, 1.6.5, 1.7, 1.7.1, 1.7.2, 1.7.3, 1.7.4, 1.7.5, 1.7.6, 1.7.7, 1.7.8, 1.7.9, 1.7.11, 1.7.12, 1.7.13, 1.8, 1.8.1, 1.8.2, 1.8.3, 1.8.4, 1.8.5, 1.8.6, 1.8.7, 1.8.8, 1.8.9, 1.8.11, 1.8.12, 1.8.13, 1.8.14, 1.8.15, 1.8.16, 1.9, 1.9.1, 1.9.2, 1.9.3, 1.9.4, 1.9.5, 1.9.6, 1.9.7, 1.9.8, 1.9.9, 1.9.11, 1.9.12, 1.9.13, 1.9.14, 1.10, 1.10.1, 1.10.2, 1.10.3, 1.10.4, 1.10.5, 1.10.6, 1.10.7, 1.11, 1.11.1, 1.11.2, 1.11.3, 1.11.4, 1.11.5, 1.11.6, 1.11.7, 1.11.8, 1.12, 1.12.1, 1.12.2, 1.12.3, 1.12.4, 1.13, 1.13.1, 1.13.2, 1.13.3, 1.16, 2022-04-12

Publicerad	Base	Temp	Sårbarhet	0day	I dag	Utn	Rem	CTI	CVE
09/08/2023	7.0	6.9	HashiCorp Consul/Consul Enterprise privilegier eskalering	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-3518
03/06/2023	5.0	5.0	Hashicorp Consul/Consul Enterprise Cluster Peering förnekande av tjänsten	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-1297
03/06/2023	6.6	6.6	Hashicorp Consul/Consul Enterprise Proxy privilegier eskalering	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2023-2816
16/11/2022	6.0	6.0	Hashicorp Consul/Consul Enterprise privilegier eskalering	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2022-3920
23/09/2022	6.0	5.9	HashiCorp Consul/Consul Enterprise SAN URI privilegier eskalering	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2022-40716
23/09/2022	6.3	6.2	HashiCorp Consul Name privilegier eskalering	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-41803
17/08/2022	3.5	3.5	Hashicorp Consul Template informationsgivning	$0-$5k	$0-$5k	Not Defined	Not Defined	0.04	CVE-2022-38149
19/04/2022	5.5	5.5	Hashicorp Consul/Consul Enterprise privilegier eskalering	$0-$5k	$0-$5k	Not Defined	Not Defined	0.07	CVE-2022-29153
24/02/2022	4.3	4.3	Hashicorp Consul/Consul Enterprise förnekande av tjänsten	$0-$5k	$0-$5k	Not Defined	Not Defined	0.02	CVE-2022-24687
12/12/2021	5.5	5.3	Hashicorp Consul Enterprise ACL Token privilegier eskalering	$0-$5k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2021-41805