Affected by GO-2022-0559 and 9 other vulnerabilities

GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

GO-2022-0953: HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul

GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

acl

package

v1.8.7-beta1 Latest Latest Go to latest Published: Dec 3, 2020 License: MPL-2.0 Imports: 6 Imported by: 196

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/hashicorp/consul

Documentation ¶

Index ¶

Constants
func ExtractNodeIdentities(nodeIdents []string) ([]*api.ACLNodeIdentity, error)
func ExtractServiceIdentities(serviceIdents []string) ([]*api.ACLServiceIdentity, error)
func GetBindingRuleIDFromPartial(client *api.Client, partialID string) (string, error)
func GetPolicyIDByName(client *api.Client, name string) (string, error)
func GetPolicyIDFromPartial(client *api.Client, partialID string) (string, error)
func GetRoleIDByName(client *api.Client, name string) (string, error)
func GetRoleIDFromPartial(client *api.Client, partialID string) (string, error)
func GetRulesFromLegacyToken(client *api.Client, tokenID string, isSecret bool) (string, error)
func GetTokenIDFromPartial(client *api.Client, partialID string) (string, error)
func New() *cmd

Constants ¶

View Source

const TestKubernetesJWT_A = "" /* 834-byte string literal not displayed */

TestKubernetesJWT_A is a valid service account jwt extracted from a minikube setup.

{
  "iss": "kubernetes/serviceaccount",
  "kubernetes.io/serviceaccount/namespace": "default",
  "kubernetes.io/serviceaccount/secret.name": "admin-token-qlz42",
  "kubernetes.io/serviceaccount/service-account.name": "admin",
  "kubernetes.io/serviceaccount/service-account.uid": "738bc251-6532-11e9-b67f-48e6c8b8ecb5",
  "sub": "system:serviceaccount:default:admin"
}

View Source

const TestKubernetesJWT_B = "" /* 830-byte string literal not displayed */

TestKubernetesJWT_B is a valid service account jwt extracted from a minikube setup.

{ "iss": "kubernetes/serviceaccount", "kubernetes.io/serviceaccount/namespace": "default", "kubernetes.io/serviceaccount/secret.name": "demo-token-kmb9n", "kubernetes.io/serviceaccount/service-account.name": "demo", "kubernetes.io/serviceaccount/service-account.uid": "76091af4-4b56-11e9-ac4b-708b11801cbe", "sub": "system:serviceaccount:default:demo" }

Variables ¶

This section is empty.

Functions ¶

func ExtractNodeIdentities ¶ added in v1.8.1

func ExtractNodeIdentities(nodeIdents []string) ([]*api.ACLNodeIdentity, error)

func ExtractServiceIdentities ¶ added in v1.5.0

func ExtractServiceIdentities(serviceIdents []string) ([]*api.ACLServiceIdentity, error)

func GetBindingRuleIDFromPartial ¶ added in v1.5.0

func GetBindingRuleIDFromPartial(client *api.Client, partialID string) (string, error)

func GetPolicyIDByName ¶

func GetPolicyIDByName(client *api.Client, name string) (string, error)

func GetPolicyIDFromPartial ¶

func GetPolicyIDFromPartial(client *api.Client, partialID string) (string, error)

func GetRoleIDByName ¶ added in v1.5.0

func GetRoleIDByName(client *api.Client, name string) (string, error)

func GetRoleIDFromPartial ¶ added in v1.5.0

func GetRoleIDFromPartial(client *api.Client, partialID string) (string, error)

func GetRulesFromLegacyToken ¶

func GetRulesFromLegacyToken(client *api.Client, tokenID string, isSecret bool) (string, error)

func GetTokenIDFromPartial ¶

func GetTokenIDFromPartial(client *api.Client, partialID string) (string, error)

func New ¶

func New() *cmd

Types ¶

This section is empty.

Source Files ¶

View all Source files

Directories ¶

Path	Synopsis
agenttokens
authmethod
create
delete
list
read
update
bindingrule
create
delete
list
read
update
bootstrap
policy
create
delete
list
read
update
role
create
delete
list
read
update
rules
token
clone
create
delete
list
read
update

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL