CVE-2019-9764

HashiCorp Consul 1.4.3 lacks server hostname verification for agent-to-agent TLS communication. In other words, the product behaves as if verify_server_hostname were set to false, even when it is actually set to true. This is fixed in 1.4.4.
References
Link Resource
https://github.com/hashicorp/consul/issues/5519 Exploit Third Party Advisory
https://github.com/hashicorp/consul/issues/5519 Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:hashicorp:consul:1.4.3:*:*:*:*:*:*:*

History

21 Nov 2024, 04:52

Type Values Removed Values Added
References () https://github.com/hashicorp/consul/issues/5519 - Exploit, Third Party Advisory () https://github.com/hashicorp/consul/issues/5519 - Exploit, Third Party Advisory

Information

Published : 2019-03-26 14:29

Updated : 2024-11-21 04:52


NVD link : CVE-2019-9764

Mitre link : CVE-2019-9764

CVE.ORG link : CVE-2019-9764


JSON object : View

Products Affected

hashicorp

  • consul
CWE
CWE-346

Origin Validation Error