logo

Database

Insecure digital certificates In github.com/hashicorp/consul

Description

multiple issues

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2021-325742. NVD-2021-325743. OSV-2021-325744. OSV-DEBIAN-2021-325745. GCVE-2021-325746. security.gentoo.org7. SECURITY-TRACKER-CVE-2021-32574

References

1. https://discuss.hashicorp.com/t/hcsec-2021-17-consul-s-envoy-tls-configuration-did-not-validate-destination-service-subject-alternative-names/268562. https://github.com/hashicorp/consul/releases/tag/v1.10.13. https://www.hashicorp.com/blog/category/consul

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.