CVE-2024-10006

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2024-10006

Severity

5.8

Medium

CVSS V3

Description

A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using Headers in L7 traffic intentions could bypass HTTP header based access rules.

References

https://images.chainguard.dev/security/CGA-whmf-754q-3vw6
https://github.com/advisories/GHSA-5c4w-8hhh-3c3h
https://images.chainguard.dev/security/CGA-75fh-4j8f-h677
https://images.chainguard.dev/security/CGA-jr23-mv76-6gww
https://images.chainguard.dev/security/CGA-gfvh-gf9w-fwhj
https://images.chainguard.dev/security/CGA-gh4c-xq42-r87h
https://images.chainguard.dev/security/CGA-6ggf-xmf3-pr3p
https://images.chainguard.dev/security/CGA-xm89-28hr-8g78
https://images.chainguard.dev/security/CGA-f469-h6mg-h2fw
https://discuss.hashicorp.com/t/hcsec-2024-23-consul-l7-intentions-vulnerable-to-headers-bypass
https://security.netapp.com/advisory/ntap-20250110-0005/

Affected packages

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

The trusted source for open source

Talk to an expert

Privacy

Terms

Product

Chainguard Containers Chainguard Libraries Chainguard VMs Integrations Pricing

Solutions

FedRAMP PCI DSS Golden Images CVE Remediation Public Sector

Customers

Customer Stories Chainguard Reviews

Resources

Events & Webinars Chainguard Courses Documentation Trust Center

Company

About Us Blog Partners Newsroom Careers Legal