Vulnerabilities > CVE-2022-40716 - Unchecked Return Value vulnerability in Hashicorp Consul

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

HIGH

Availability impact

NONE

network

low complexity

hashicorp

CWE-252

NVD

Published: 2022-09-23

Updated: 2023-11-07

Summary

HashiCorp Consul and Consul Enterprise up to 1.11.8, 1.12.4, and 1.13.1 do not check for multiple SAN URI values in a CSR on the internal RPC endpoint, enabling leverage of privileged access to bypass service mesh intentions. Fixed in 1.11.9, 1.12.5, and 1.13.2."

Vulnerable Configurations

Part	Description	Count
Application	Hashicorp Hashicorp Consul - Hashicorp Consul 0.1.0 Hashicorp Consul 0.2.0 Hashicorp Consul 0.2.1 Hashicorp Consul 0.3.0 Hashicorp Consul 0.3.1 Hashicorp Consul 0.4.0 Hashicorp Consul 0.4.1 Hashicorp Consul 0.5.0 Hashicorp Consul 0.5.1 Hashicorp Consul 0.5.2 Hashicorp Consul 0.6.0 Hashicorp Consul 0.6.1 Hashicorp Consul 0.6.2 Hashicorp Consul 0.6.3 Hashicorp Consul 0.6.4 Hashicorp Consul 0.7.0 Hashicorp Consul 0.7.1 Hashicorp Consul 0.7.2 Hashicorp Consul 0.7.3 Hashicorp Consul 0.7.4 Hashicorp Consul 0.7.5 Hashicorp Consul 0.8.0 Hashicorp Consul 0.8.1 Hashicorp Consul 0.8.2 Hashicorp Consul 0.8.3 Hashicorp Consul 0.8.4 Hashicorp Consul 0.8.5 Hashicorp Consul 0.9.0 Hashicorp Consul 0.9.1 Hashicorp Consul 0.9.2 Hashicorp Consul 0.9.3 Hashicorp Consul 0.9.4 Hashicorp Consul 1.0.0 Hashicorp Consul 1.0.1 Hashicorp Consul 1.0.2 Hashicorp Consul 1.0.3 Hashicorp Consul 1.0.4 Hashicorp Consul 1.0.5 Hashicorp Consul 1.0.6 Hashicorp Consul 1.0.7 Hashicorp Consul 1.0.8 Hashicorp Consul 1.1.0 Hashicorp Consul 1.1.1 Hashicorp Consul 1.2.0 Hashicorp Consul 1.2.1 Hashicorp Consul 1.2.2 Hashicorp Consul 1.2.3 Hashicorp Consul 1.2.4 Hashicorp Consul 1.3.0 Hashicorp Consul 1.3.1 Hashicorp Consul 1.4.0 Hashicorp Consul 1.4.1 Hashicorp Consul 1.4.2 Hashicorp Consul 1.4.3 Hashicorp Consul 1.4.4 Hashicorp Consul 1.4.5 Hashicorp Consul 1.5.1 Hashicorp Consul 1.5.2 Hashicorp Consul 1.5.3 Hashicorp Consul 1.6.0 Hashicorp Consul 1.6.1 Hashicorp Consul 1.6.2 Hashicorp Consul 1.6.3 Hashicorp Consul 1.6.4 Hashicorp Consul 1.6.5 Hashicorp Consul 1.6.6 Hashicorp Consul 1.6.7 Hashicorp Consul 1.6.8 Hashicorp Consul 1.6.9 Hashicorp Consul 1.6.10 Hashicorp Consul 1.7.0 Hashicorp Consul 1.7.1 Hashicorp Consul 1.7.2 Hashicorp Consul 1.7.3 Hashicorp Consul 1.7.4 Hashicorp Consul 1.7.5 Hashicorp Consul 1.7.6 Hashicorp Consul 1.7.7 Hashicorp Consul 1.7.8 Hashicorp Consul 1.7.9 Hashicorp Consul 1.7.10 Hashicorp Consul 1.7.11 Hashicorp Consul 1.7.12 Hashicorp Consul 1.7.13 Hashicorp Consul 1.7.14 Hashicorp Consul 1.8.0 Hashicorp Consul 1.8.1 Hashicorp Consul 1.8.2 Hashicorp Consul 1.8.3 Hashicorp Consul 1.8.4 Hashicorp Consul 1.8.5 Hashicorp Consul 1.8.6 Hashicorp Consul 1.8.7 Hashicorp Consul 1.8.8 Hashicorp Consul 1.8.9 Hashicorp Consul 1.8.10 Hashicorp Consul 1.8.14 Hashicorp Consul 1.8.15 Hashicorp Consul 1.8.16 Hashicorp Consul 1.8.17 Hashicorp Consul 1.8.18 Hashicorp Consul 1.9.0 Hashicorp Consul 1.9.1 Hashicorp Consul 1.9.2 Hashicorp Consul 1.9.3 Hashicorp Consul 1.9.4 Hashicorp Consul 1.9.5 Hashicorp Consul 1.9.6 Hashicorp Consul 1.9.7 Hashicorp Consul 1.9.8 Hashicorp Consul 1.9.9 Hashicorp Consul 1.9.10 Hashicorp Consul 1.9.11 Hashicorp Consul 1.9.12 Hashicorp Consul 1.9.13 Hashicorp Consul 1.9.14 Hashicorp Consul 1.9.15 Hashicorp Consul 1.9.16 Hashicorp Consul 1.9.17 Hashicorp Consul 1.10.0 Hashicorp Consul 1.10.1 Hashicorp Consul 1.10.2 Hashicorp Consul 1.10.3 Hashicorp Consul 1.10.4 Hashicorp Consul 1.10.5 Hashicorp Consul 1.10.6 Hashicorp Consul 1.10.7 Hashicorp Consul 1.10.8 Hashicorp Consul 1.10.9 Hashicorp Consul 1.10.10 Hashicorp Consul 1.11.0 Hashicorp Consul 1.11.1 Hashicorp Consul 1.11.2 Hashicorp Consul 1.11.3 Hashicorp Consul 1.11.4 Hashicorp Consul 1.11.5 Hashicorp Consul 1.11.8 Hashicorp Consul 0.1.1 Hashicorp Consul 0.6.5 Hashicorp Consul 0.10.0 Hashicorp Consul 0.11.0 Hashicorp Consul 0.12.0 Hashicorp Consul 0.12.1 Hashicorp Consul 0.12.2 Hashicorp Consul 0.13.0 Hashicorp Consul 0.14.0 Hashicorp Consul 0.15.0 Hashicorp Consul 0.16.0 Hashicorp Consul 0.18.0 Hashicorp Consul 0.18.2 Hashicorp Consul 0.18.3 Hashicorp Consul 0.18.4 Hashicorp Consul 0.18.5 Hashicorp Consul 0.19.0 Hashicorp Consul 0.19.1 Hashicorp Consul 0.19.2 Hashicorp Consul 0.19.3 Hashicorp Consul 0.19.4 Hashicorp Consul 0.20.0 Hashicorp Consul 1.5.0 Hashicorp Consul 1.12.0 Hashicorp Consul 1.12.4 Hashicorp Consul 1.13.0 Hashicorp Consul 1.13.1	365

Common Weakness Enumeration (CWE)

CWE-252 - Unchecked Return Value

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References