Approved changes feed: RSS · Atom

cpe:2.3:a:hashicorp:consul:1.15.0:*:*:*:enterprise:*:*:*

part: a version: 1.15.0 update: *

VendorHashicorp (dc524c16-6a01-528e-a41c-9d3e02e5e4a3)
ProductConsul (5323a3d1-770c-5792-8baa-0ccc723628c6)
Edition*
Language*
Software editionenterprise
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/consul purl2cpe 2026-06-01 10:14:57.185584
pkg:deb/ubuntu/consul purl2cpe 2026-06-01 10:14:57.185585
pkg:github/hashicorp/consul purl2cpe 2026-06-01 10:14:57.185587

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-2816 vulnerable 2026-06-03 14:51:44.069595 Consul Envoy Extension Downsteam Proxy Configuration By Upstream Service Owner
HIGH (8.7)
Consul and Consul Enterprise allowed any user with service:write permissions to use Envoy extensions configured via service-defaults to patch remote proxy instances that target the configured service, regardless of whether the user has permission to modify the service(s) corresponding to those modified proxies.
Published: 2023-06-02T22:43:34.553Z
Updated: 2024-10-07T20:12:01.627Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.