CVE-2024-10005 — Consul L7 Intentions Vulnerable To URL Path Bypass

CVE-2024-10005

Consul L7 Intentions Vulnerable To URL Path Bypass PUBLISHED

Description (CNA)

A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using URL paths in L7 traffic intentions could bypass HTTP request path-based access rules.

Affected (CNA)

Vendor / product	Versions
HashiCorp / Consul	affected 1.9.0 before 1.20.1
HashiCorp / Consul Enterprise	affected 1.9.0 before 1.20.1

CWE

CWE-22

References

https://discuss.hashicorp.com/t/hcsec-2024-22-consul-l7-intentions-vulnerable-to-url-path-bypass

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

https://security.netapp.com/advisory/ntap-20250110-0004/