CVE-2022-40716

mediumPriorität · verfolgen · 26EPSS 0.011 · 65. PerzentilEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

1.09% (65th) EPSS

CVSS 6.5 · medium

Is it mine?

24 products

Prüfe deine Angriffsfläche

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · osv

EPSS · bewertet 2026-10-27

HashiCorp Consul and Consul Enterprise up to 1.11.8, 1.12.4, and 1.13.1 do not check for multiple SAN URI values in a CSR on the internal RPC endpoint, enabling leverage of privileged access to bypass service mesh intentions. Fixed in 1.11.9, 1.12.5, and 1.13.2."

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

6.5

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:Nprimary · NVD / NIST USAusnutzbarkeit 2.8 · Auswirkung 3.6

v3.16.5mediumAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:Nsecondary · FSTEC (BDU) RU

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:Nsecondary · ENISA EU

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:NsecondaryAusnutzbarkeit 2.8 · Auswirkung 3.6

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:Nsecondary · OSV

v3.16mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:Usecondary · CVSS-BT (t0sche)

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Trackcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-252USprimärCWE-252USCWE-252US

betroffene Produkte (24)

Betroffene Produkte und Versionsbereiche.

n/a n/a≤ n/aenisa_euvdEU
Fedora Project Fedora≤ 39fstec_bduRU
Fedora Project Fedora≤ 37fstec_bduRU
Fedora Project Fedora≤ 38fstec_bduRU
Hashicorp Consul≤ 1.11.9fstec_bduRU
Hashicorp Consul1.12.0 → 1.12.5fstec_bduRU
Hashicorp Consul1.13.0 → 1.13.2fstec_bduRU
Hashicorp Consul Enterprise≤ 1.11.9fstec_bduRU
Hashicorp Consul Enterprise1.12.0 → 1.12.5fstec_bduRU
Hashicorp Consul Enterprise1.13.0 → 1.13.2fstec_bduRU
Red Hat Inc. Red Hat Advanced Cluster Management for Kubernetes 2alle Versionenfstec_bduRU
Red Hat Inc. Red Hat OpenShift Container Platform≤ 4fstec_bduRU
Red Hat Inc. Red Hat Openshift Data Foundation≤ 4fstec_bduRU
ООО «Ред Софт» РЕД ОС≤ 7.3fstec_bduRU
Сообщество свободного программного обеспечения Debian GNU/Linux≤ 11fstec_bduRU
hashicorp consul< 1.11.9nvdUScpe:2.3:a:hashicorp:consul:*:*:*:*:*:*:*:*
hashicorp consul1.12.0 → 1.12.5nvdUScpe:2.3:a:hashicorp:consul:*:*:*:*:*:*:*:*
hashicorp consul1.13.0 → 1.13.2nvdUScpe:2.3:a:hashicorp:consul:*:*:*:*:*:*:*:*
Bitnami consul< 1.11.9osvUSpkg:bitnami/consul
Bitnami consul1.12.0 → 1.12.5osvUSpkg:bitnami/consul

20 von 24 angezeigt

Advisories (3)

Hersteller- und Ökosystem-Meldungen dazu.

GHSA-m69r-9g56-7mv8HashiCorp Consul vulnerable to authorization bypass2022-09-25ghsa · osvUS
HashiCorp Consul and Consul Enterprise versions prior to 1.11.9, 1.12.5, and 1.13.2 do not check for multiple SAN URI values in a CSR on the internal RPC endpoint, enabling leverage of privileged access to bypass service mesh intentions. A specially crafted CSR sent directly to Consul’s internal server agent RPC endpoint can include multiple SAN URI values with additional service names. This issue has been fixed in versions 1.11.9, 1.12.5, and 1.13.2. There are no known workarounds.
BIT-consul-2022-407162024-03-06vendor · osvUS
HashiCorp Consul and Consul Enterprise up to 1.11.8, 1.12.4, and 1.13.1 do not check for multiple SAN URI values in a CSR on the internal RPC endpoint, enabling leverage of privileged access to bypass service mesh intentions. Fixed in 1.11.9, 1.12.5, and 1.13.2."
GO-2022-1029HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul2024-08-21vendor · osvUS
HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

auch bekannt als (7)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu osv nvd NVD CVE.org MITRE

veröffentlicht 2022-09-23geändert 2026-06-17

verwandt (331)

Verwandte Einträge.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2020-7247US	critical9.8OT kritisch	99.0% (100th)	KEV	2020-01-29
smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to execute arbitrary commands as root via a crafted SMTP sessio…
CVE-2007-3798US	critical9.8	70.4% (99th)	Exploit	2007-07-16
Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an…
CVE-2005-4360US	high7.8	86.7% (100th)	Exploit	2005-12-20
The URL parser in Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional SP2 allows remote attackers to execute arbitrary code via multiple requests to ".dll"…
CVE-2010-0211US	critical9.8	28.5% (98th)	Exploit	2010-07-28
The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows remote attackers to cause a denia…
CVE-2013-1319US	high10.0	25.1% (98th)	—	2013-05-15
Microsoft Publisher 2003 SP3 does not properly check the return value of an unspecified method, which allows remote attackers to execute arbitrary code via a crafted Publisher file…

+326 weitere

Referenzen (15)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan