CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2022-3920
High (7.5) in hashicorp consul. EPSS 0.7% chance of exploitation in the next 30 days. Fixed in github.com/hashicorp/consul 1.14.0.
HashiCorp Consul and Consul Enterprise 1.13.0 up to 1.13.3 do not filter cluster filtering's imported nodes and services for HTTP or RPC endpoints used by the UI. Fixed in 1.14.0.
Severity
- EPSS
- 0.7% chance of exploitation in the next 30 days; higher than 53% of CVEs (scores of 2026-10-31)
- CWE
- CWE-862
- Published
- Modified
- Record from
- the NVD, synced
Affected
- hashicorp:consul
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-gw2g-hhc9-wgjh | Go | github.com/hashicorp/consul | >=1.13.0 <1.14.0 | 1.14.0 |
| GO-2022-1121 | Go | github.com/hashicorp/consul | >=1.13.0 <1.14.0 | 1.14.0 |