config

Oct 14, 2024 GO-2024-3241 +1 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Sep 20, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Aug 27, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jul 11, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jun 12, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

May 16, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Mar 26, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Feb 26, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Feb 6, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Mar 26, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Feb 13, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jan 22, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Dec 12, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Nov 3, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Oct 6, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Mar 26, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Feb 13, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jan 18, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Dec 12, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Oct 31, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Sep 19, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Changes in this version

type CheckDefinition

+ TCPUseTLS *bool

Aug 5, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jun 26, 2023 GO-2024-2704 +3 more

  GO-2024-2704: Consul JWT Auth in L7 Intentions Allow for Mismatched Service Identity and JWT Providers in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Changes in this version

type Audit

+ RPCEnabled *bool

type Config

+ Experiments []string

+ Locality *Locality

+ type Locality struct

+ Region *string

+ Zone *string

type RuntimeConfig

+ Experiments []string

+ Locality *Locality

+ func (c *RuntimeConfig) StructLocality() *structs.Locality

Jun 10, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Mar 26, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Feb 13, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jan 22, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Dec 12, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Oct 31, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Sep 19, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Aug 5, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jun 23, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jun 1, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Changes in this version

type Config

+ ServerRejoinAgeMax *string

type RuntimeConfig

+ ServerRejoinAgeMax time.Duration

type Telemetry

+ EnableHostMetrics *bool

Mar 30, 2023 GO-2023-1827 +4 more

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1828: Hashicorp Consul allows user with service:write permissions to patch remote proxy instances in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Mar 7, 2023 GO-2023-1827 +4 more

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1828: Hashicorp Consul allows user with service:write permissions to patch remote proxy instances in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Feb 24, 2023 GO-2023-1827 +4 more

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1828: Hashicorp Consul allows user with service:write permissions to patch remote proxy instances in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Changes in this version

type Config

+ RaftLogStore RaftLogStoreRaw

type DeprecatedConfig

+ RaftBoltDBConfig *consul.RaftBoltDBConfig

+ StartJoinAddrsLAN []string

+ StartJoinAddrsWAN []string

+ type FlagValuesTarget = decodeTarget

type Limits

+ RequestLimits RequestLimits

+ type RaftBoltDBConfigRaw struct

+ NoFreelistSync *bool

+ type RaftLogStoreRaw struct

+ Backend *string

+ BoltDBConfig RaftBoltDBConfigRaw

+ DisableLogCache *bool

+ Verification RaftLogStoreVerificationRaw

+ WALConfig RaftWALConfigRaw

+ type RaftLogStoreVerificationRaw struct

+ Enabled *bool

+ Interval *string

+ type RaftWALConfigRaw struct

+ SegmentSizeMB *int

+ type RequestLimits struct

+ Mode *string

+ ReadRate *float64

+ WriteRate *float64

type RuntimeConfig

+ RaftLogStoreConfig consul.RaftLogStoreConfig

+ RequestLimitsMode consulrate.Mode

+ RequestLimitsReadRate rate.Limit

+ RequestLimitsWriteRate rate.Limit

type Tokens

+ ConfigFileRegistration *string

Oct 31, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Changes in this version

type Performance

+ GRPCKeepaliveInterval *string

+ GRPCKeepaliveTimeout *string

type RuntimeConfig

+ GRPCKeepaliveInterval time.Duration

+ GRPCKeepaliveTimeout time.Duration

Sep 19, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Changes in this version

type RuntimeConfig

+ func (o *RuntimeConfig) DeepCopy() *RuntimeConfig

Aug 5, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jun 23, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

May 16, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Changes in this version

type RuntimeConfig

+ LocalProxyConfigResyncInterval time.Duration

Mar 29, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Mar 7, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jan 26, 2023 GO-2023-1639 +4 more

  GO-2023-1639: Consul Server Panic when Ingress and API Gateways Configured with Peering Connections in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Dec 13, 2022 GO-2023-1639 +4 more

  GO-2023-1639: Consul Server Panic when Ingress and API Gateways Configured with Peering Connections in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Nov 30, 2022 GO-2023-1639 +4 more

  GO-2023-1639: Consul Server Panic when Ingress and API Gateways Configured with Peering Connections in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Nov 21, 2022 GO-2023-1639 +4 more

  GO-2023-1639: Consul Server Panic when Ingress and API Gateways Configured with Peering Connections in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Nov 15, 2022 GO-2023-1639 +4 more

  GO-2023-1639: Consul Server Panic when Ingress and API Gateways Configured with Peering Connections in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Changes in this version

type Addresses

+ GRPCTLS *string

type CheckDefinition

+ OSService *string

+ type CloudConfigRaw struct

+ AuthURL *string

+ ClientID *string

+ ClientSecret *string

+ Hostname *string

+ ResourceID *string

+ ScadaAddress *string

type Config

+ Cloud *CloudConfigRaw

+ XDS XDS

type Ports

+ GRPCTLS *int

type RuntimeConfig

+ Cloud hcpconfig.CloudConfig

+ GRPCTLSAddrs []net.Addr

+ GRPCTLSPort int

+ XDSUpdateRateLimit rate.Limit

+ func (c *RuntimeConfig) IsCloudEnabled() bool

+ type XDS struct

+ UpdateMaxPerSecond *float64

Sep 29, 2022 GO-2022-1121 +4 more

  GO-2022-1121: Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jun 23, 2023 GO-2022-1121 +4 more

  GO-2022-1121: Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

May 15, 2023 GO-2022-1121 +4 more

  GO-2022-1121: Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Changes in this version

type Config

+ Reporting Reporting

+ type License struct

+ Enabled *bool

+ type LicenseConfig struct

+ Enabled bool

+ type Reporting struct

+ License License

+ type ReportingConfig struct

+ License LicenseConfig

type RuntimeConfig

+ Reporting ReportingConfig

Mar 7, 2023 GO-2022-1121 +4 more

  GO-2022-1121: Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jan 26, 2023 GO-2022-1121 +4 more

  GO-2022-1121: Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Dec 13, 2022 GO-2022-1121 +4 more

  GO-2022-1121: Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Nov 30, 2022 GO-2022-1121 +4 more

  GO-2022-1121: Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Oct 19, 2022 GO-2022-1121 +4 more

  GO-2022-1121: Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Changes in this version

type Peering

+ TestAllowPeerRegistrations *bool

type RuntimeConfig

+ PeeringTestAllowPeerRegistrations bool

Sep 20, 2022 GO-2022-1121 +4 more

  GO-2022-1121: Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Changes in this version

type FileSource

+ FromUser bool

type TLS

+ SpecifiedTLSStanza *bool

+ func (t *TLS) ContainsDefaults() bool

type TLSProtocolConfig

+ UseAutoCert *bool

+ func (c TLSProtocolConfig) IsZero() bool

Aug 11, 2022 GO-2022-1029 +6 more

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2022-1121: Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Aug 9, 2022 GO-2022-1029 +6 more

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2022-1121: Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Changes in this version

type CheckDefinition

+ UDP *string

type Config

+ BuildDate *time.Time

+ Peering Peering

+ type Peering struct

+ Enabled *bool

type RuntimeConfig

+ BuildDate time.Time

+ PeeringEnabled bool

type Upstream

+ DestinationPeer *string

Jun 21, 2022 GO-2023-1827 +3 more

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jun 15, 2022 GO-2023-1827 +3 more

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jan 26, 2023 GO-2023-1827 +3 more

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Dec 13, 2022 GO-2023-1827 +3 more

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Nov 30, 2022 GO-2023-1827 +3 more

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Oct 19, 2022 GO-2023-1827 +3 more

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Sep 20, 2022 GO-2023-1827 +3 more

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Aug 11, 2022 GO-2022-1029 +5 more

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jul 13, 2022 GO-2022-1029 +5 more

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jun 3, 2022 GO-2022-1029 +5 more

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

May 25, 2022 GO-2022-1029 +5 more

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Changes in this version

type Config

+ VersionMetadata *string

type RuntimeConfig

+ VersionMetadata string

+ func (c *RuntimeConfig) VersionWithMetadata() string

type TLS

+ GRPCModifiedByDeprecatedConfig *struct{}

type Telemetry

+ RetryFailedConfiguration *bool

Apr 19, 2022 GO-2022-1029 +5 more

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Changes in this version

type Config

+ AutoReloadConfig *bool

+ TLS TLS

type Connect

+ EnableServerlessPlugin *bool

type DeprecatedConfig

+ CAFile *string

+ CAPath *string

+ CertFile *string

+ KeyFile *string

+ TLSCipherSuites *string

+ TLSMinVersion *string

+ TLSPreferServerCipherSuites *bool

+ VerifyIncoming *bool

+ VerifyIncomingHTTPS *bool

+ VerifyIncomingRPC *bool

+ VerifyOutgoing *bool

+ VerifyServerHostname *bool

+ type FileWatcherEvent struct

+ Filenames []string

type LoadResult

+ WatchedFiles []string

type RuntimeConfig

+ AutoReloadConfig bool

+ AutoReloadConfigCoalesceInterval time.Duration

+ ConnectServerlessPluginEnabled bool

+ StaticRuntimeConfig StaticRuntimeConfig

+ TLS tlsutil.Config

+ type StaticRuntimeConfig struct

+ EncryptVerifyIncoming bool

+ EncryptVerifyOutgoing bool

+ type TLS struct

+ Defaults TLSProtocolConfig

+ GRPC TLSProtocolConfig

+ HTTPS TLSProtocolConfig

+ InternalRPC TLSProtocolConfig

+ type TLSProtocolConfig struct

+ CAFile *string

+ CAPath *string

+ CertFile *string

+ KeyFile *string

+ TLSCipherSuites *string

+ TLSMinVersion *string

+ VerifyIncoming *bool

+ VerifyOutgoing *bool

+ VerifyServerHostname *bool

type UIConfig

+ HCPEnabled bool

+ type Watcher interface

+ Add func(filename string) error

+ EventsCh func() chan *FileWatcherEvent

+ Remove func(filename string)

+ Replace func(oldFile, newFile string) error

+ Start func(ctx context.Context)

+ Stop func() error

+ func NewFileWatcher(configFiles []string, logger hclog.Logger) (Watcher, error)

+ func NewRateLimitedFileWatcher(configFiles []string, logger hclog.Logger, coalesceInterval time.Duration) (Watcher, error)

Apr 4, 2022 GO-2023-1827 +3 more

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Oct 19, 2022 GO-2023-1827 +3 more

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Changes in this version

type Limits

+ RPCClientTimeout *string

type RuntimeConfig

+ RPCClientTimeout time.Duration

Sep 22, 2022 GO-2023-1827 +3 more

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Sep 19, 2022 GO-2023-1827 +3 more

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Aug 11, 2022 GO-2022-1029 +5 more

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jul 13, 2022 GO-2022-1029 +5 more

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

May 25, 2022 GO-2022-1029 +5 more

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Apr 13, 2022 GO-2022-1029 +5 more

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Feb 28, 2022 GO-2022-0615 +6 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Feb 11, 2022 GO-2022-0615 +6 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jan 13, 2022 GO-2022-0615 +7 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Dec 15, 2021 GO-2022-0615 +7 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Dec 14, 2021 GO-2022-0615 +7 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Changes in this version

type AuditSink

+ Mode *string

type CheckDefinition

+ FailuresBeforeWarning *int

+ H2PingUseTLS *bool

type Config

+ Partition *string

+ RaftBoltDBConfig *consul.RaftBoltDBConfig

type DNS

+ RecursorStrategy *string

+ type DeprecatedConfig struct

+ ACLAgentMasterToken *string

+ ACLAgentToken *string

+ ACLDatacenter *string

+ ACLDefaultPolicy *string

+ ACLDownPolicy *string

+ ACLEnableKeyListPolicy *bool

+ ACLMasterToken *string

+ ACLReplicationToken *string

+ ACLTTL *string

+ ACLToken *string

+ EnableACLReplication *bool

+ type DeprecatedTokens struct

+ AgentMaster *string

+ Master *string

+ type Metadata struct

+ Keys []string

+ Unused []string

+ Warnings []string

type RuntimeConfig

+ ACLInitialManagementToken string

+ ACLResolverSettings consul.ACLResolverSettings

+ DNSRecursorStrategy dns.RecursorStrategy

+ RaftBoltDBConfig consul.RaftBoltDBConfig

+ func (c *RuntimeConfig) PartitionOrDefault() string

+ func (c *RuntimeConfig) PartitionOrEmpty() string

type Tokens

+ AgentRecovery *string

+ InitialManagement *string

type Upstream

+ DestinationPartition *string

Dec 6, 2021 GO-2022-1029 +5 more

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Nov 18, 2021 GO-2022-1029 +5 more

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Nov 2, 2021 GO-2022-1029 +5 more

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Oct 15, 2021 GO-2022-1029 +5 more

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Sep 16, 2021 GO-2022-1029 +5 more

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jul 13, 2022 GO-2022-1029 +5 more

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

May 25, 2022 GO-2022-1029 +5 more

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Apr 13, 2022 GO-2022-1029 +5 more

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Feb 28, 2022 GO-2022-0615 +6 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Feb 11, 2022 GO-2022-0615 +6 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jan 13, 2022 GO-2022-0615 +7 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Dec 15, 2021 GO-2022-0615 +7 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Dec 13, 2021 GO-2022-0615 +7 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Nov 11, 2021 GO-2022-0615 +7 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Sep 27, 2021 GO-2022-0615 +7 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Aug 27, 2021 GO-2022-0615 +7 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Changes in this version

+ func ApplyDefaultQueryOptions(config *RuntimeConfig) func(options *structs.QueryOptions)

Jul 15, 2021 GO-2022-0559 +9 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jul 1, 2021 GO-2022-0615 +9 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jun 22, 2021 GO-2022-0615 +9 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Changes in this version

type CheckDefinition

+ H2PING *string

+ TLSServerName *string

type Config

+ LicensePollBaseTime *string

+ LicensePollMaxTime *string

+ LicenseUpdateBaseTime *string

+ LicenseUpdateMaxTime *string

+ type LoadOpts struct

+ ConfigFiles []string

+ ConfigFormat string

+ DefaultConfig Source

+ DevMode *bool

+ FlagValues Config

+ HCL []string

+ Overrides []Source

+ type LoadResult struct

+ RuntimeConfig *RuntimeConfig

+ Warnings []string

type ServiceDefinition

+ SocketPath *string

type ServiceProxy

+ LocalServiceSocketPath string

+ Mode *string

+ TransparentProxy *TransparentProxyConfig

+ type TransparentProxyConfig struct

+ DialedDirectly *bool

+ OutboundListenerPort *int

type Upstream

+ LocalBindSocketMode *string

+ LocalBindSocketPath *string

Jun 17, 2021 GO-2022-0894 +7 more

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jun 16, 2021 GO-2022-0894 +7 more

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jun 10, 2021 GO-2022-0894 +7 more

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

May 27, 2021 GO-2022-0894 +7 more

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

May 5, 2021 GO-2022-0894 +7 more

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Apr 16, 2021 GO-2022-0894 +7 more

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Mar 18, 2021 GO-2022-0894 +7 more

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Apr 14, 2022 GO-2022-0894 +7 more

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Changes in this version

type CheckDefinition

+ DisableRedirects *bool

Feb 28, 2022 GO-2022-0615 +8 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Feb 11, 2022 GO-2022-0615 +8 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jan 13, 2022 GO-2022-0615 +9 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Dec 15, 2021 GO-2022-0615 +9 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Dec 13, 2021 GO-2022-0615 +9 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Nov 11, 2021 GO-2022-0615 +9 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Sep 27, 2021 GO-2022-0615 +9 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Aug 27, 2021 GO-2022-0615 +9 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jul 15, 2021 GO-2022-0559 +11 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jun 21, 2021 GO-2022-0559 +11 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jun 4, 2021 GO-2022-0559 +11 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Apr 15, 2021 GO-2022-0559 +11 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Mar 4, 2021 GO-2022-0559 +12 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Feb 1, 2021 GO-2022-0559 +12 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jan 20, 2021 GO-2022-0559 +12 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Changes in this version

type HTTPConfig

+ MaxHeaderBytes *int

type RuntimeConfig

+ HTTPMaxHeaderBytes int

Dec 11, 2020 GO-2022-0559 +12 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Changes in this version

type Config

+ ReadReplica *bool

type RuntimeConfig

+ ReadReplica bool

Nov 24, 2020 GO-2022-0559 +12 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Changes in this version

type Config

+ AdvertiseReconnectTimeout *string

+ RPC RPC

+ UIConfig RawUIConfig

+ UseStreamingBackend *bool

+ type RPC struct

+ EnableStreaming *bool

+ type RawUIConfig struct

+ ContentPath *string

+ DashboardURLTemplates map[string]string

+ Dir *string

+ Enabled *bool

+ MetricsProvider *string

+ MetricsProviderFiles []string

+ MetricsProviderOptionsJSON *string

+ MetricsProxy RawUIMetricsProxy

+ type RawUIMetricsProxy struct

+ AddHeaders []RawUIMetricsProxyAddHeader

+ BaseURL *string

+ PathAllowlist []string

+ type RawUIMetricsProxyAddHeader struct

+ Name *string

+ Value *string

type RuntimeConfig

+ ACLTokens token.Config

+ AdvertiseReconnectTimeout time.Duration

+ RPCConfig consul.RPCConfig

+ UIConfig UIConfig

+ UseStreamingBackend bool

type Telemetry

+ DisableCompatOneNine *bool

+ type UIConfig struct

+ ContentPath string

+ DashboardURLTemplates map[string]string

+ Dir string

+ Enabled bool

+ MetricsProvider string

+ MetricsProviderFiles []string

+ MetricsProviderOptionsJSON string

+ MetricsProxy UIMetricsProxy

+ type UIMetricsProxy struct

+ AddHeaders []UIMetricsProxyAddHeader

+ BaseURL string

+ PathAllowlist []string

+ type UIMetricsProxyAddHeader struct

+ Name string

+ Value string

Nov 17, 2020 GO-2022-0615 +7 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Nov 10, 2020 GO-2022-0615 +7 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Nov 7, 2020 GO-2022-0615 +7 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Oct 12, 2020 GO-2022-0615 +7 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Dec 15, 2021 GO-2022-0615 +7 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Dec 13, 2021 GO-2022-0615 +7 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Nov 11, 2021 GO-2022-0615 +7 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Sep 27, 2021 GO-2022-0615 +7 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Aug 27, 2021 GO-2022-0615 +7 more

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Jul 15, 2021 GO-2022-0559 +9 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Jun 21, 2021 GO-2022-0559 +9 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Changes in this version

type Config

+ LicensePath *string

Jun 4, 2021 GO-2022-0559 +9 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Jun 3, 2021 GO-2022-0559 +9 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

May 26, 2021 GO-2022-0559 +9 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

May 18, 2021 GO-2022-0559 +9 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Apr 15, 2021 GO-2022-0559 +9 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Mar 4, 2021 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Feb 11, 2021 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Jan 22, 2021 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Dec 10, 2020 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Dec 3, 2020 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Nov 19, 2020 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Oct 23, 2020 GO-2022-0559 +11 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Sep 11, 2020 GO-2022-0559 +12 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2501: Denial of service in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Changes in this version

+ var ErrNoData = fmt.Errorf("config source contained no data")

+ type FileSource struct

+ Data string

+ Format string

+ Name string

+ func (f FileSource) Parse() (Config, mapstructure.Metadata, error)

+ func (f FileSource) Source() string

+ type LiteralSource struct

+ Config Config

+ Name string

+ func (l LiteralSource) Parse() (Config, mapstructure.Metadata, error)

+ func (l LiteralSource) Source() string

type RuntimeConfig

+ Logging logging.Config

+ func Load(opts BuilderOpts, extraHead Source, overrides ...Source) (*RuntimeConfig, []string, error)

type Source

+ Parse func() (Config, mapstructure.Metadata, error)

+ Source func() string

Aug 12, 2020 GO-2022-0559 +12 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2501: Denial of service in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Aug 7, 2020 GO-2022-0559 +12 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2501: Denial of service in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Jul 30, 2020 GO-2022-0559 +12 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2501: Denial of service in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Changes in this version

+ type AutoConfig struct

+ Authorizer AutoConfigAuthorizer

+ DNSSANs []string

+ Enabled bool

+ IPSANs []net.IP

+ IntroToken string

+ IntroTokenFile string

+ ServerAddresses []string

+ type AutoConfigAuthorizationRaw struct

+ Enabled *bool

+ Static AutoConfigAuthorizerRaw

+ type AutoConfigAuthorizer struct

+ AllowReuse bool

+ AuthMethod structs.ACLAuthMethod

+ ClaimAssertions []string

+ Enabled bool

+ type AutoConfigAuthorizerRaw struct

+ AllowReuse *bool

+ BoundAudiences []string

+ BoundIssuer *string

+ ClaimAssertions []string

+ ClaimMappings map[string]string

+ ClockSkewLeeway *string

+ ExpirationLeeway *string

+ JWKSCACert *string

+ JWKSURL *string

+ JWTSupportedAlgs []string

+ JWTValidationPubKeys []string

+ ListClaimMappings map[string]string

+ NotBeforeLeeway *string

+ OIDCDiscoveryCACert *string

+ OIDCDiscoveryURL *string

+ type AutoConfigRaw struct

+ Authorization AutoConfigAuthorizationRaw

+ DNSSANs []string

+ Enabled *bool

+ IPSANs []string

+ IntroToken *string

+ IntroTokenFile *string

+ ServerAddresses []string

+ type BuilderOpts struct

+ Config Config

+ ConfigFiles []string

+ ConfigFormat string

+ DevMode *bool

+ HCL []string

+ type Cache struct

+ EntryFetchMaxBurst *int

+ EntryFetchRate *float64

type Config

+ AutoConfig AutoConfigRaw

+ Cache Cache

type Connect

+ TestCALeafRootChangeSpread *string

type RuntimeConfig

+ AutoConfig AutoConfig

+ Cache cache.Options

+ func (c *RuntimeConfig) ConnectCAConfiguration() (*structs.CAConfiguration, error)

Jun 18, 2020 GO-2022-0559 +11 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2501: Denial of service in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Changes in this version

+ type Audit struct

+ Enabled *bool

+ Sinks map[string]AuditSink

+ type AuditSink struct

+ DeliveryGuarantee *string

+ Format *string

+ Name *string

+ Path *string

+ RotateBytes *int

+ RotateDuration *string

+ RotateMaxFiles *int

+ Type *string

type Config

+ Audit *Audit

+ PrimaryGateways []string

+ PrimaryGatewaysInterval *string

+ SerfAllowedCIDRsLAN []string

+ SerfAllowedCIDRsWAN []string

type Connect

+ MeshGatewayWANFederationEnabled *bool

type RuntimeConfig

+ ConnectMeshGatewayWANFederationEnabled bool

+ PrimaryGateways []string

+ PrimaryGatewaysInterval time.Duration

+ SerfAllowedCIDRsLAN []net.IPNet

+ SerfAllowedCIDRsWAN []net.IPNet

Jun 15, 2020 GO-2022-0559 +7 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

May 21, 2020 GO-2022-0559 +7 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

May 14, 2020 GO-2022-0559 +7 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Apr 15, 2021 GO-2022-0559 +7 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Mar 4, 2021 GO-2022-0559 +8 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Jan 22, 2021 GO-2022-0559 +8 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Dec 10, 2020 GO-2022-0559 +8 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Nov 19, 2020 GO-2022-0559 +8 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Oct 26, 2020 GO-2022-0559 +9 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Sep 11, 2020 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2501: Denial of service in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Aug 12, 2020 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2501: Denial of service in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Aug 7, 2020 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2501: Denial of service in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Jul 30, 2020 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2501: Denial of service in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Jun 10, 2020 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2501: Denial of service in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

May 5, 2020 GO-2022-0559 +14 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0847: Incorrect Permission Assignment for Critical Resource in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0859: Improper Input Validation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0861: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2501: Denial of service in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Changes in this version

type ACL

+ MSPDisableBootstrap *bool

type DNS

+ PreferNamespace *bool

Mar 16, 2020 GO-2022-0559 +14 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0847: Incorrect Permission Assignment for Critical Resource in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0859: Improper Input Validation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0861: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2501: Denial of service in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Changes in this version

type Limits

+ TxnMaxReqLen *uint64

type RuntimeConfig

+ TxnMaxReqLen uint64

Feb 20, 2020 GO-2022-0559 +14 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0847: Incorrect Permission Assignment for Critical Resource in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0859: Improper Input Validation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0861: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2501: Denial of service in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Feb 11, 2020 GO-2022-0559 +14 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0847: Incorrect Permission Assignment for Critical Resource in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0859: Improper Input Validation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0861: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2501: Denial of service in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Changes in this version

type AutoEncrypt

+ DNSSAN []string

+ IPSAN []string

type Builder

+ func (_ *Builder) BuildEnterpriseRuntimeConfig(_ *Config) (EnterpriseRuntimeConfig, error)

type CheckDefinition

+ Body *string

+ FailuresBeforeCritical *int

+ SuccessBeforePassing *int

type Config

+ AdvertiseAddrLANIPv4 *string

+ AdvertiseAddrLANIPv6 *string

+ AdvertiseAddrWANIPv4 *string

+ AdvertiseAddrWANIPv6 *string

+ DefaultQueryTime *string

+ LogJSON *bool

+ MaxQueryTime *string

+ type EnterpriseDNSConfig struct

+ type EnterpriseMeta struct

+ func (_ *EnterpriseMeta) ToStructs() structs.EnterpriseMeta

+ type EnterpriseRuntimeConfig struct

type RuntimeConfig

+ AutoEncryptDNSSAN []string

+ AutoEncryptIPSAN []net.IP

+ DefaultQueryTime time.Duration

+ LogJSON bool

+ MaxQueryTime time.Duration

+ type ServiceProviderToken struct

+ AccessorID *string

+ SecretID *string

type Source

+ func OverrideEnterpriseSource() Source

type Tokens

+ ManagedServiceProvider []ServiceProviderToken

Jan 31, 2020 GO-2022-0559 +8 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Jan 24, 2020 GO-2022-0559 +8 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Dec 20, 2019 GO-2022-0559 +8 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Dec 10, 2019 GO-2022-0559 +8 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Nov 19, 2020 GO-2022-0559 +8 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Sep 11, 2020 GO-2022-0559 +9 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Aug 12, 2020 GO-2022-0559 +9 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Jul 30, 2020 GO-2022-0559 +9 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Jun 10, 2020 GO-2022-0559 +9 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Changes in this version

type HTTPConfig

+ UseCache *bool

type RuntimeConfig

+ HTTPUseCache bool

Apr 14, 2020 GO-2022-0559 +13 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0847: Incorrect Permission Assignment for Critical Resource in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0859: Improper Input Validation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0861: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Feb 20, 2020 GO-2022-0559 +13 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0847: Incorrect Permission Assignment for Critical Resource in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0859: Improper Input Validation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0861: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Jan 30, 2020 GO-2022-0559 +13 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0847: Incorrect Permission Assignment for Critical Resource in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0859: Improper Input Validation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0861: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Changes in this version

type Limits

+ HTTPMaxConnsPerClient *int

+ HTTPSHandshakeTimeout *string

+ RPCHandshakeTimeout *string

+ RPCMaxConnsPerClient *int

type RuntimeConfig

+ HTTPMaxConnsPerClient int

+ HTTPSHandshakeTimeout time.Duration

+ RPCHandshakeTimeout time.Duration

+ RPCMaxConnsPerClient int

Nov 13, 2019 GO-2022-0559 +15 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0847: Incorrect Permission Assignment for Critical Resource in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0859: Improper Input Validation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0861: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0874: Incorrect Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Changes in this version

type Autopilot

+ MinQuorum *uint

+ type ExposeConfig struct

+ Checks *bool

+ Paths []ExposePath

+ Port *int

+ type ExposePath struct

+ ListenerPort *int

+ LocalPathPort *int

+ Path *string

+ Protocol *string

type Ports

+ ExposeMaxPort *int

+ ExposeMinPort *int

type RuntimeConfig

+ AutopilotMinQuorum uint

+ ExposeMaxPort int

+ ExposeMinPort int

type ServiceProxy

+ Expose *ExposeConfig

Sep 12, 2019 GO-2022-0559 +15 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0847: Incorrect Permission Assignment for Critical Resource in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0859: Improper Input Validation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0861: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0874: Incorrect Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Aug 23, 2019 GO-2022-0559 +15 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0847: Incorrect Permission Assignment for Critical Resource in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0859: Improper Input Validation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0861: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0874: Incorrect Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Changes in this version

+ type MeshGatewayConfig struct

+ Mode *string

+ type ServiceAddress struct

+ Address *string

+ Port *int

type ServiceDefinition

+ TaggedAddresses map[string]ServiceAddress

type ServiceProxy

+ MeshGateway *MeshGatewayConfig

type Upstream

+ MeshGateway *MeshGatewayConfig

Aug 13, 2019 GO-2022-0559 +14 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0859: Improper Input Validation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0861: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0874: Incorrect Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Jul 26, 2019 GO-2022-0559 +14 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0859: Improper Input Validation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0861: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0874: Incorrect Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Jul 15, 2019 GO-2022-0559 +14 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0859: Improper Input Validation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0861: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0874: Incorrect Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Jul 8, 2019 GO-2022-0559 +14 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0859: Improper Input Validation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0861: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0874: Incorrect Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Jul 25, 2019 GO-2022-0559 +12 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0874: Incorrect Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Changes in this version

type Config

+ LogRotateMaxFiles *int

+ RaftTrailingLogs *int

type Limits

+ KVMaxValueSize *uint64

type RuntimeConfig

+ KVMaxValueSize uint64

+ LogRotateMaxFiles int

+ RaftTrailingLogs int

Jun 27, 2019 GO-2022-0559 +12 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0874: Incorrect Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Changes in this version

+ func UIPathBuilder(UIContentString string) string

+ type AutoEncrypt struct

+ AllowTLS *bool

+ TLS *bool

type CheckDefinition

+ OutputMaxSize *int

type Config

+ AutoEncrypt AutoEncrypt

+ CheckOutputMaxSize *int

+ DNSAltDomain *string

+ UIContentPath *string

type RuntimeConfig

+ AutoEncryptAllowTLS bool

+ AutoEncryptTLS bool

+ CheckOutputMaxSize int

+ DNSAltDomain string

+ UIContentPath string

May 22, 2019 GO-2022-0559 +12 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0874: Incorrect Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

May 8, 2019 GO-2022-0559 +13 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0874: Incorrect Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1852: HashiCorp Consul Incorrect Access Control vulnerability in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Changes in this version

type ACL

+ RoleTTL *string

type Config

+ ConfigEntries ConfigEntries

+ EnableCentralServiceConfig *bool

+ type ConfigEntries struct

+ Bootstrap []map[string]interface{}

type RuntimeConfig

+ ACLRoleTTL time.Duration

+ ConfigEntryBootstrap []structs.ConfigEntry

+ EnableCentralServiceConfig bool

May 22, 2019 GO-2022-0559 +13 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0874: Incorrect Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1852: HashiCorp Consul Incorrect Access Control vulnerability in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Mar 20, 2019 GO-2022-0559 +13 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0874: Incorrect Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1852: HashiCorp Consul Incorrect Access Control vulnerability in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Mar 4, 2019 GO-2022-0559 +14 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0874: Incorrect Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1852: HashiCorp Consul Incorrect Access Control vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Changes in this version

type ACL

+ EnableTokenPersistence *bool

type DNS

+ CacheMaxAge *string

+ UseCache *bool

type RuntimeConfig

+ ACLEnableTokenPersistence bool

+ DNSCacheMaxAge time.Duration

+ DNSUseCache bool

+ func (c *RuntimeConfig) ToTLSUtilConfig() *tlsutil.Config

Jan 28, 2019 GO-2022-0559 +15 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0874: Incorrect Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1852: HashiCorp Consul Incorrect Access Control vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

  GO-2023-1945: HashiCorp Consul Access Restriction Bypass in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Jan 23, 2019 GO-2022-0559 +15 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0874: Incorrect Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1852: HashiCorp Consul Incorrect Access Control vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

  GO-2023-1945: HashiCorp Consul Access Restriction Bypass in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

Changes in this version

type HTTPConfig

+ AllowWriteHTTPFrom []string

type RuntimeConfig

+ AllowWriteHTTPFrom []*net.IPNet

+ ConnectTestCALeafRootChangeSpread time.Duration

Nov 14, 2018 GO-2022-0559 +14 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1852: HashiCorp Consul Incorrect Access Control vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

  GO-2023-1945: HashiCorp Consul Access Restriction Bypass in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

Changes in this version

+ type ACL struct

+ DefaultPolicy *string

+ DisabledTTL *string

+ DownPolicy *string

+ EnableKeyListPolicy *bool

+ Enabled *bool

+ PolicyTTL *string

+ TokenReplication *bool

+ TokenTTL *string

+ Tokens Tokens

type Config

+ ACL ACL

+ PrimaryDatacenter *string

type RuntimeConfig

+ ACLPolicyTTL time.Duration

+ ACLTokenReplication bool

+ ACLTokenTTL time.Duration

+ ACLsEnabled bool

+ ConnectReplicationToken string

+ PrimaryDatacenter string

+ type Tokens struct

+ Agent *string

+ AgentMaster *string

+ Default *string

+ Master *string

+ Replication *string

Oct 19, 2018 GO-2022-0559 +12 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

Nov 13, 2018 GO-2022-0559 +12 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

Oct 11, 2018 GO-2022-0559 +12 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

Changes in this version

type Addresses

+ GRPC *string

type DNS

+ SOA *SOA

type Ports

+ GRPC *int

+ SidecarMaxPort *int

+ SidecarMinPort *int

type RuntimeConfig

+ ConnectSidecarMaxPort int

+ ConnectSidecarMinPort int

+ DNSSOA RuntimeSOAConfig

+ GRPCAddrs []net.Addr

+ GRPCPort int

+ type RuntimeSOAConfig struct

+ Expire uint32

+ Minttl uint32

+ Refresh uint32

+ Retry uint32

+ type SOA struct

+ Expire *uint32

+ Minttl *uint32

+ Refresh *uint32

+ Retry *uint32

type ServiceConnect

+ SidecarService *ServiceDefinition

type ServiceConnectProxy

+ Upstreams []Upstream

type ServiceDefinition

+ Proxy *ServiceProxy

+ type ServiceProxy struct

+ Config map[string]interface{}

+ DestinationServiceID *string

+ DestinationServiceName *string

+ LocalServiceAddress *string

+ LocalServicePort *int

+ Upstreams []Upstream

+ type Upstream struct

+ Config map[string]interface{}

+ Datacenter *string

+ DestinationName *string

+ DestinationNamespace *string

+ DestinationType *string

+ LocalBindAddress *string

+ LocalBindPort *int

Nov 21, 2018 GO-2022-0559 +12 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

Sep 13, 2018 GO-2022-0559 +12 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

Changes in this version

type Config

+ LogFile *string

+ LogRotateBytes *int

+ LogRotateDuration *string

type RuntimeConfig

+ LogFile string

+ LogRotateBytes int

+ LogRotateDuration time.Duration

type ServiceDefinition

+ Weights *ServiceWeights

+ type ServiceWeights struct

+ Passing *int

+ Warning *int

Jul 30, 2018 GO-2022-0559 +12 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

Changes in this version

type CheckDefinition

+ AliasNode *string

+ AliasService *string

type Config

+ DisableHTTPUnprintableCharFilter *bool

+ GossipLAN GossipLANConfig

+ GossipWAN GossipWANConfig

+ type GossipLANConfig struct

+ GossipInterval *string

+ GossipNodes *int

+ ProbeInterval *string

+ ProbeTimeout *string

+ RetransmitMult *int

+ SuspicionMult *int

+ type GossipWANConfig struct

+ GossipInterval *string

+ GossipNodes *int

+ ProbeInterval *string

+ ProbeTimeout *string

+ RetransmitMult *int

+ SuspicionMult *int

type RuntimeConfig

+ DisableHTTPUnprintableCharFilter bool

+ GossipLANGossipInterval time.Duration

+ GossipLANGossipNodes int

+ GossipLANProbeInterval time.Duration

+ GossipLANProbeTimeout time.Duration

+ GossipLANRetransmitMult int

+ GossipLANSuspicionMult int

+ GossipWANGossipInterval time.Duration

+ GossipWANGossipNodes int

+ GossipWANProbeInterval time.Duration

+ GossipWANProbeTimeout time.Duration

+ GossipWANRetransmitMult int

+ GossipWANSuspicionMult int

+ func (c *RuntimeConfig) ClientAddress() (unixAddr, httpAddr, httpsAddr string)

type ServiceConnect

+ Native *bool

type ServiceDefinition

+ Kind *string

+ ProxyDestination *string

Jul 12, 2018 GO-2022-0559 +12 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

Changes in this version

type RuntimeConfig

+ func (c *RuntimeConfig) APIConfig(includeClientCerts bool) (*api.Config, error)

Jun 25, 2018 GO-2022-0559 +12 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0879: Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

  GO-2024-2505: Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul

Changes in this version

type Config

+ Connect Connect

+ type Connect struct

+ CAConfig map[string]interface{}

+ CAProvider *string

+ Enabled *bool

+ Proxy ConnectProxy

+ ProxyDefaults ConnectProxyDefaults

+ type ConnectProxy struct

+ AllowManagedAPIRegistration *bool

+ AllowManagedRoot *bool

+ type ConnectProxyDefaults struct

+ Config map[string]interface{}

+ DaemonCommand []string

+ ExecMode *string

+ ScriptCommand []string

type DNS

+ NodeMetaTXT *bool

type Ports

+ ProxyMaxPort *int

+ ProxyMinPort *int

type RuntimeConfig

+ ConnectCAConfig map[string]interface{}

+ ConnectCAProvider string

+ ConnectEnabled bool

+ ConnectProxyAllowManagedAPIRegistration bool

+ ConnectProxyAllowManagedRoot bool

+ ConnectProxyBindMaxPort int

+ ConnectProxyBindMinPort int

+ ConnectProxyDefaultConfig map[string]interface{}

+ ConnectProxyDefaultDaemonCommand []string

+ ConnectProxyDefaultExecMode string

+ ConnectProxyDefaultScriptCommand []string

+ ConnectTestDisableManagedProxies bool

+ DNSNodeMetaTXT bool

+ Telemetry lib.TelemetryConfig

+ type ServiceConnect struct

+ Proxy *ServiceConnectProxy

+ type ServiceConnectProxy struct

+ Command []string

+ Config map[string]interface{}

+ ExecMode *string

type ServiceDefinition

+ Connect *ServiceConnect

Nov 21, 2018 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

May 11, 2018 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

Changes in this version

type Config

+ RaftSnapshotInterval *string

+ RaftSnapshotThreshold *int

type RuntimeConfig

+ RaftSnapshotInterval time.Duration

+ RaftSnapshotThreshold int

+ TelemetryPrometheusRetentionTime time.Duration

type ServiceDefinition

+ Meta map[string]string

type Telemetry

+ PrometheusRetentionTime *string

Oct 31, 2018 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

Nov 21, 2018 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

Changes in this version

type Config

+ EnableLocalScriptChecks *bool

type RuntimeConfig

+ EnableLocalScriptChecks bool

+ EnableRemoteScriptChecks bool

Apr 13, 2018 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

Changes in this version

type Config

+ DiscoveryMaxStale *string

type DNS

+ ARecordLimit *int

type RuntimeConfig

+ DNSARecordLimit int

+ DiscoveryMaxStale time.Duration

Feb 9, 2018 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

Feb 7, 2018 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

Feb 6, 2018 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

Changes in this version

type CheckDefinition

+ GRPC *string

+ GRPCUseTLS *bool

type Source

+ func DefaultEnterpriseSource() Source

Jan 24, 2018 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

Dec 15, 2017 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

Nov 20, 2017 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

Changes in this version

type Config

+ EnableAgentTLSForChecks *bool

+ SnapshotAgent map[string]interface{}

type Flags

+ Args []string

+ ConfigFormat *string

type RuntimeConfig

+ EnableAgentTLSForChecks bool

Nov 11, 2017 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

Oct 16, 2017 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

Changes in this version

+ const SerfLANKeyring

+ const SerfWANKeyring

+ func AddFlags(fs *flag.FlagSet, f *Flags)

+ func DefaultRPCProtocol() (int, error)

+ func FormatFrom(name string) string

+ func TranslateKeys(v map[string]interface{}, dict map[string]string)

+ type Addresses struct

+ DNS *string

+ HTTP *string

+ HTTPS *string

+ type AdvertiseAddrsConfig struct

+ RPC *string

+ SerfLAN *string

+ SerfWAN *string

+ type Autopilot struct

+ CleanupDeadServers *bool

+ DisableUpgradeMigration *bool

+ LastContactThreshold *string

+ MaxTrailingLogs *int

+ RedundancyZoneTag *string

+ ServerStabilizationTime *string

+ UpgradeVersionTag *string

+ type Builder struct

+ Flags Flags

+ GetPrivateIPv4 func() ([]*net.IPAddr, error)

+ GetPublicIPv6 func() ([]*net.IPAddr, error)

+ Head []Source

+ Hostname func() (string, error)

+ Sources []Source

+ Tail []Source

+ Warnings []string

+ func NewBuilder(flags Flags) (*Builder, error)

+ func (b *Builder) Build() (rt RuntimeConfig, err error)

+ func (b *Builder) BuildAndValidate() (RuntimeConfig, error)

+ func (b *Builder) ReadFile(path string) error

+ func (b *Builder) ReadPath(path string) error

+ func (b *Builder) Validate(rt RuntimeConfig) error

+ type CheckDefinition struct

+ DeregisterCriticalServiceAfter *string

+ DockerContainerID *string

+ HTTP *string

+ Header map[string][]string

+ ID *string

+ Interval *string

+ Method *string

+ Name *string

+ Notes *string

+ Script *string

+ ScriptArgs []string

+ ServiceID *string

+ Shell *string

+ Status *string

+ TCP *string

+ TLSSkipVerify *bool

+ TTL *string

+ Timeout *string

+ Token *string

+ type Config struct

+ ACLAgentMasterToken *string

+ ACLAgentToken *string

+ ACLDatacenter *string

+ ACLDefaultPolicy *string

+ ACLDisabledTTL *string

+ ACLDownPolicy *string

+ ACLEnableKeyListPolicy *bool

+ ACLEnforceVersion8 *bool

+ ACLMasterToken *string

+ ACLReplicationToken *string

+ ACLTTL *string

+ ACLToken *string

+ AEInterval *string

+ Addresses Addresses

+ AdvertiseAddrLAN *string

+ AdvertiseAddrWAN *string

+ Autopilot Autopilot

+ BindAddr *string

+ Bootstrap *bool

+ BootstrapExpect *int

+ CAFile *string

+ CAPath *string

+ CertFile *string

+ Check *CheckDefinition

+ CheckDeregisterIntervalMin *string

+ CheckReapInterval *string

+ CheckUpdateInterval *string

+ Checks []CheckDefinition

+ ClientAddr *string

+ Consul Consul

+ DNS DNS

+ DNSDomain *string

+ DNSRecursors []string

+ DataDir *string

+ Datacenter *string

+ DisableAnonymousSignature *bool

+ DisableCoordinates *bool

+ DisableHostNodeID *bool

+ DisableKeyringFile *bool

+ DisableRemoteExec *bool

+ DisableUpdateCheck *bool

+ DiscardCheckOutput *bool

+ EnableACLReplication *bool

+ EnableDebug *bool

+ EnableScriptChecks *bool

+ EnableSyslog *bool

+ EncryptKey *string

+ EncryptVerifyIncoming *bool

+ EncryptVerifyOutgoing *bool

+ HTTPConfig HTTPConfig

+ KeyFile *string

+ LeaveOnTerm *bool

+ Limits Limits

+ LogLevel *string

+ NodeID *string

+ NodeMeta map[string]string

+ NodeName *string

+ NonVotingServer *bool

+ Performance Performance

+ PidFile *string

+ Ports Ports

+ RPCProtocol *int

+ RaftProtocol *int

+ ReconnectTimeoutLAN *string

+ ReconnectTimeoutWAN *string

+ RejoinAfterLeave *bool

+ RetryJoinIntervalLAN *string

+ RetryJoinIntervalWAN *string

+ RetryJoinLAN []string

+ RetryJoinMaxAttemptsLAN *int

+ RetryJoinMaxAttemptsWAN *int

+ RetryJoinWAN []string

+ Revision *string

+ SegmentLimit *int

+ SegmentName *string

+ SegmentNameLimit *int

+ Segments []Segment

+ SerfBindAddrLAN *string

+ SerfBindAddrWAN *string

+ ServerMode *bool

+ ServerName *string

+ Service *ServiceDefinition

+ Services []ServiceDefinition

+ SessionTTLMin *string

+ SkipLeaveOnInt *bool

+ StartJoinAddrsLAN []string

+ StartJoinAddrsWAN []string

+ SyncCoordinateIntervalMin *string

+ SyncCoordinateRateTarget *float64

+ SyslogFacility *string

+ TLSCipherSuites *string

+ TLSMinVersion *string

+ TLSPreferServerCipherSuites *bool

+ TaggedAddresses map[string]string

+ Telemetry Telemetry

+ TranslateWANAddrs *bool

+ UI *bool

+ UIDir *string

+ UnixSocket UnixSocket

+ VerifyIncoming *bool

+ VerifyIncomingHTTPS *bool

+ VerifyIncomingRPC *bool

+ VerifyOutgoing *bool

+ VerifyServerHostname *bool

+ Version *string

+ VersionPrerelease *string

+ Watches []map[string]interface{}

+ func Merge(files ...Config) Config

+ func Parse(data string, format string) (c Config, err error)

+ type Consul struct

+ Coordinate struct{ ... }

+ Raft struct{ ... }

+ SerfLAN struct{ ... }

+ SerfWAN struct{ ... }

+ Server struct{ ... }

+ type DNS struct

+ AllowStale *bool

+ DisableCompression *bool

+ EnableTruncate *bool

+ MaxStale *string

+ NodeTTL *string

+ OnlyPassing *bool

+ RecursorTimeout *string

+ ServiceTTL map[string]string

+ UDPAnswerLimit *int

+ type Flags struct

+ Config Config

+ ConfigFiles []string

+ DevMode *bool

+ HCL []string

+ func ParseFlags(args []string) (Flags, error)

+ type HTTPConfig struct

+ BlockEndpoints []string

+ ResponseHeaders map[string]string

+ type Limits struct

+ RPCMaxBurst *int

+ RPCRate *float64

+ type Performance struct

+ LeaveDrainTime *string

+ RPCHoldTimeout *string

+ RaftMultiplier *int

+ type Ports struct

+ DNS *int

+ HTTP *int

+ HTTPS *int

+ SerfLAN *int

+ SerfWAN *int

+ Server *int

+ type RetryJoinAzure struct

+ ClientID *string

+ SecretAccessKey *string

+ SubscriptionID *string

+ TagName *string

+ TagValue *string

+ TenantID *string

+ type RetryJoinEC2 struct

+ AccessKeyID *string

+ Region *string

+ SecretAccessKey *string

+ TagKey *string

+ TagValue *string

+ type RetryJoinGCE struct

+ CredentialsFile *string

+ ProjectName *string

+ TagValue *string

+ ZonePattern *string

+ type RuntimeConfig struct

+ ACLAgentMasterToken string

+ ACLAgentToken string

+ ACLDatacenter string

+ ACLDefaultPolicy string

+ ACLDisabledTTL time.Duration

+ ACLDownPolicy string

+ ACLEnableKeyListPolicy bool

+ ACLEnforceVersion8 bool

+ ACLMasterToken string

+ ACLReplicationToken string

+ ACLTTL time.Duration

+ ACLToken string

+ AEInterval time.Duration

+ AdvertiseAddrLAN *net.IPAddr

+ AdvertiseAddrWAN *net.IPAddr

+ AutopilotCleanupDeadServers bool

+ AutopilotDisableUpgradeMigration bool

+ AutopilotLastContactThreshold time.Duration

+ AutopilotMaxTrailingLogs int

+ AutopilotRedundancyZoneTag string

+ AutopilotServerStabilizationTime time.Duration

+ AutopilotUpgradeVersionTag string

+ BindAddr *net.IPAddr

+ Bootstrap bool

+ BootstrapExpect int

+ CAFile string

+ CAPath string

+ CertFile string

+ CheckDeregisterIntervalMin time.Duration

+ CheckReapInterval time.Duration

+ CheckUpdateInterval time.Duration

+ Checks []*structs.CheckDefinition

+ ClientAddrs []*net.IPAddr

+ ConsulCoordinateUpdateBatchSize int

+ ConsulCoordinateUpdateMaxBatches int

+ ConsulCoordinateUpdatePeriod time.Duration

+ ConsulRaftElectionTimeout time.Duration

+ ConsulRaftHeartbeatTimeout time.Duration

+ ConsulRaftLeaderLeaseTimeout time.Duration

+ ConsulSerfLANGossipInterval time.Duration

+ ConsulSerfLANProbeInterval time.Duration

+ ConsulSerfLANProbeTimeout time.Duration

+ ConsulSerfLANSuspicionMult int

+ ConsulSerfWANGossipInterval time.Duration

+ ConsulSerfWANProbeInterval time.Duration

+ ConsulSerfWANProbeTimeout time.Duration

+ ConsulSerfWANSuspicionMult int

+ ConsulServerHealthInterval time.Duration

+ DNSAddrs []net.Addr

+ DNSAllowStale bool

+ DNSDisableCompression bool

+ DNSDomain string

+ DNSEnableTruncate bool

+ DNSMaxStale time.Duration

+ DNSNodeTTL time.Duration

+ DNSOnlyPassing bool

+ DNSPort int

+ DNSRecursorTimeout time.Duration

+ DNSRecursors []string

+ DNSServiceTTL map[string]time.Duration

+ DNSUDPAnswerLimit int

+ DataDir string

+ Datacenter string

+ DevMode bool

+ DisableAnonymousSignature bool

+ DisableCoordinates bool

+ DisableHostNodeID bool

+ DisableKeyringFile bool

+ DisableRemoteExec bool

+ DisableUpdateCheck bool

+ DiscardCheckOutput bool

+ EnableACLReplication bool

+ EnableDebug bool

+ EnableScriptChecks bool

+ EnableSyslog bool

+ EnableUI bool

+ EncryptKey string

+ EncryptVerifyIncoming bool

+ EncryptVerifyOutgoing bool

+ HTTPAddrs []net.Addr

+ HTTPBlockEndpoints []string

+ HTTPPort int

+ HTTPResponseHeaders map[string]string

+ HTTPSAddrs []net.Addr

+ HTTPSPort int

+ KeyFile string

+ LeaveDrainTime time.Duration

+ LeaveOnTerm bool

+ LogLevel string

+ NodeID types.NodeID

+ NodeMeta map[string]string

+ NodeName string

+ NonVotingServer bool

+ PidFile string

+ RPCAdvertiseAddr *net.TCPAddr

+ RPCBindAddr *net.TCPAddr

+ RPCHoldTimeout time.Duration

+ RPCMaxBurst int

+ RPCProtocol int

+ RPCRateLimit rate.Limit

+ RaftProtocol int

+ ReconnectTimeoutLAN time.Duration

+ ReconnectTimeoutWAN time.Duration

+ RejoinAfterLeave bool

+ RetryJoinIntervalLAN time.Duration

+ RetryJoinIntervalWAN time.Duration

+ RetryJoinLAN []string

+ RetryJoinMaxAttemptsLAN int

+ RetryJoinMaxAttemptsWAN int

+ RetryJoinWAN []string

+ Revision string

+ SegmentLimit int

+ SegmentName string

+ SegmentNameLimit int

+ Segments []structs.NetworkSegment

+ SerfAdvertiseAddrLAN *net.TCPAddr

+ SerfAdvertiseAddrWAN *net.TCPAddr

+ SerfBindAddrLAN *net.TCPAddr

+ SerfBindAddrWAN *net.TCPAddr

+ SerfPortLAN int

+ SerfPortWAN int

+ ServerMode bool

+ ServerName string

+ ServerPort int

+ Services []*structs.ServiceDefinition

+ SessionTTLMin time.Duration

+ SkipLeaveOnInt bool

+ StartJoinAddrsLAN []string

+ StartJoinAddrsWAN []string

+ SyncCoordinateIntervalMin time.Duration

+ SyncCoordinateRateTarget float64

+ SyslogFacility string

+ TLSCipherSuites []uint16

+ TLSMinVersion string

+ TLSPreferServerCipherSuites bool

+ TaggedAddresses map[string]string

+ TelemetryAllowedPrefixes []string

+ TelemetryBlockedPrefixes []string

+ TelemetryCirconusAPIApp string

+ TelemetryCirconusAPIToken string

+ TelemetryCirconusAPIURL string

+ TelemetryCirconusBrokerID string

+ TelemetryCirconusBrokerSelectTag string

+ TelemetryCirconusCheckDisplayName string

+ TelemetryCirconusCheckForceMetricActivation string

+ TelemetryCirconusCheckID string

+ TelemetryCirconusCheckInstanceID string

+ TelemetryCirconusCheckSearchTag string

+ TelemetryCirconusCheckTags string

+ TelemetryCirconusSubmissionInterval string

+ TelemetryCirconusSubmissionURL string

+ TelemetryDisableHostname bool

+ TelemetryDogstatsdAddr string

+ TelemetryDogstatsdTags []string

+ TelemetryFilterDefault bool

+ TelemetryMetricsPrefix string

+ TelemetryStatsdAddr string

+ TelemetryStatsiteAddr string

+ TranslateWANAddrs bool

+ UIDir string

+ UnixSocketGroup string

+ UnixSocketMode string

+ UnixSocketUser string

+ VerifyIncoming bool

+ VerifyIncomingHTTPS bool

+ VerifyIncomingRPC bool

+ VerifyOutgoing bool

+ VerifyServerHostname bool

+ Version string

+ VersionPrerelease string

+ Watches []map[string]interface{}

+ func DefaultRuntimeConfig(hcl string) *RuntimeConfig

+ func (c *RuntimeConfig) IncomingHTTPSConfig() (*tls.Config, error)

+ func (c *RuntimeConfig) Sanitized() map[string]interface{}

+ type Segment struct

+ Advertise *string

+ Bind *string

+ Name *string

+ Port *int

+ RPCListener *bool

+ type ServiceDefinition struct

+ Address *string

+ Check *CheckDefinition

+ Checks []CheckDefinition

+ EnableTagOverride *bool

+ ID *string

+ Name *string

+ Port *int

+ Tags []string

+ Token *string

+ type Source struct

+ Data string

+ Format string

+ Name string

+ func DefaultConsulSource() Source

+ func DefaultSource() Source

+ func DefaultVersionSource() Source

+ func DevConsulSource() Source

+ func DevSource() Source

+ func NewSource(name, data string) Source

+ func NonUserSource() Source

+ func VersionSource(rev, ver, verPre string) Source

+ type Telemetry struct

+ CirconusAPIApp *string

+ CirconusAPIToken *string

+ CirconusAPIURL *string

+ CirconusBrokerID *string

+ CirconusBrokerSelectTag *string

+ CirconusCheckDisplayName *string

+ CirconusCheckForceMetricActivation *string

+ CirconusCheckID *string

+ CirconusCheckInstanceID *string

+ CirconusCheckSearchTag *string

+ CirconusCheckTags *string

+ CirconusSubmissionInterval *string

+ CirconusSubmissionURL *string

+ DisableHostname *bool

+ DogstatsdAddr *string

+ DogstatsdTags []string

+ EnableDeprecatedNames *bool

+ FilterDefault *bool

+ MetricsPrefix *string

+ PrefixFilter []string

+ StatsdAddr *string

+ StatsiteAddr *string

+ type UnixSocket struct

+ Group *string

+ Mode *string

+ User *string

Oct 5, 2017 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

Sep 28, 2017 GO-2022-0559 +10 more

  GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

  GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

  GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

  GO-2022-0776: Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

  GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

  GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1850: HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

  GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2023-1853: HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul