Executive brief
HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul
Affected products
- Go github.com/hashicorp/consul
Junglewise Threat Intelligence
CVE-2018-19653: GO-2023-1850 - HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul
CVE-2018-19653 · Severity: low · CVSS 3 · Published 2024-08-20
Technologies: github.com/hashicorp/consul (Go). Vendors: Go.
Related threats
- GO-2026-4690 - Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul
- GO-2025-4081 - Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul
- GO-2025-4082 - Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul
- GO-2024-3242 - Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul
- GO-2024-3243 - Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul