VULNERABILITY INTELLIGENCE

CVE-2022-3920

CVSS score5.3 MEDIUM
EPSS probability0.72%
CISA KEVNot currently listed
Published2022-11-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

HashiCorp Consul and Consul Enterprise 1.13.0 up to 1.13.3 do not filter cluster filtering's imported nodes and services for HTTP or RPC endpoints used by the UI. Fixed in 1.14.0.

Weakness classification

  • security@hashicorp.com: CWE-862
  • nvd@nist.gov: CWE-862

Primary references