CVE-2022-29153
40Vexday Risk Score
Corrige ahora. Ella explotación observada por VulnCheck y tiene exploit funcional público.
ssvc Actepss 8.7%
de la publicación al arma
Publicada en NVD19 abr
VulnCheck+573d
probabilidad de explotación
8.7%top 5% de las CVE
explotación observada
síVulnCheck
HashiCorp Consul and Consul Enterprise up to 1.9.16, 1.10.9, and 1.11.4 may allow server side request forgery when the Consul client agent follows redirects returned by HTTP health check endpoints. Fixed in 1.9.17, 1.10.10, and 1.11.5.
Productos afectados
n/a · n/aReferencias
https://discuss.hashicorp.comhttps://discuss.hashicorp.com/t/hcsec-2022-10-consul-s-http-health-check-may-allow-server-side-request-forgery/https://discuss.hashicorp.com/t/hcsec-2022-10-consul-s-http-health-check-may-allow-server-side-request-forgery/38393https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RBODKZL7HQE5XXS3SA2VIDVL4LAA5RWH/https://security.gentoo.org/glsa/202208-09https://security.netapp.com/advisory/ntap-20220602-0005/