Approved changes feed: RSS · Atom

cpe:2.3:a:hashicorp:consul:1.20.0:*:*:*:enterprise:*:*:*

part: a version: 1.20.0 update: *

VendorHashicorp (dc524c16-6a01-528e-a41c-9d3e02e5e4a3)
ProductConsul (5323a3d1-770c-5792-8baa-0ccc723628c6)
Edition*
Language*
Software editionenterprise
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/consul purl2cpe 2026-06-01 10:14:57.185629
pkg:deb/ubuntu/consul purl2cpe 2026-06-01 10:14:57.185630
pkg:github/hashicorp/consul purl2cpe 2026-06-01 10:14:57.185631

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-10006 vulnerable 2026-06-03 14:54:04.677680 Consul L7 Intentions Vulnerable To Headers Bypass
HIGH (8.3)
A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using Headers in L7 traffic intentions could bypass HTTP header based access rules.
Published: 2024-10-30T21:20:37.011Z
Updated: 2025-01-10T13:06:41.296Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10005 vulnerable 2026-06-03 14:54:04.676881 Consul L7 Intentions Vulnerable To URL Path Bypass
HIGH (8.1)
A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using URL paths in L7 traffic intentions could bypass HTTP request path-based access rules.
Published: 2024-10-30T21:19:22.576Z
Updated: 2025-01-10T13:06:39.935Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.