VDB
GO-2022-1121
GO-2022-1121
PUBLISHED
Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| github.com | hashicorp/consul | 1.13.0, 1.13.0 |
Timeline
- Aug 21, 2024 CVE Published
- Feb 4, 2026 CVE Updated
- May 1, 2026 Security Advisory
References
- https://github.com/advisories/GHSA-gw2g-hhc9-wgjh advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-3920 advisory
- https://github.com/hashicorp/consul/commit/706866fa0016b0aa302679f9c648859050d19b2e patch
- https://discuss.hashicorp.com/t/hcsec-2022-28-consul-cluster-peering-leaks-imported-nodes-services-information/46946 url