Executive brief
HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul
Affected products
- Go github.com/hashicorp/consul
Junglewise Threat Intelligence
CVE-2022-40716: GO-2022-1029 - HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul
CVE-2022-40716 · Severity: low · CVSS 3.1 · Published 2024-08-21
Technologies: github.com/hashicorp/consul (Go). Vendors: Go.
Related threats
- GO-2026-4690 - Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul
- GO-2025-4081 - Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul
- GO-2025-4082 - Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul
- GO-2024-3242 - Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul
- GO-2024-3243 - Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul