Security Advisory

CVE-2024-10005

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-10-30 21:19:22
Last updated 2025-01-10 13:06:39
Assigner HashiCorp
State PUBLISHED

Description

A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using URL paths in L7 traffic intentions could bypass HTTP request path-based access rules.