Security Advisory

CVE-2023-0845

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-03-09 15:14:26
Last updated 2025-02-28 16:24:23
Assigner HashiCorp
State PUBLISHED

Description

Consul and Consul Enterprise allowed an authenticated user with service:write permissions to trigger a workflow that causes Consul server and client agents to crash under certain circumstances. This vulnerability was fixed in Consul 1.14.5.