CVE-2018-19653

HashiCorp Consul 0.5.1 through 1.4.0 can use cleartext agent-to-agent RPC communication because the verify_outgoing setting is improperly documented

published December 9, 2018

CVSS
—
EPSS
1%
Percentile
68.5
In the wild
Unconfirmed
What it is

HashiCorp Consul 0.5.1 through 1.4.0 can use cleartext agent-to-agent RPC communication because the verify_outgoing setting is improperly documented. NOTE: the vendor has provided reconfiguration steps that do not require a software upgrade.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01223 · 68.5th percentile
Published
2018-12-09T19:00Z
EPSS history
Timeline
  • 09 DEC 19:00Z
    HashiCorp Consul 0.5.1 through 1.4.0 can use cleartext agent-to-agent RPC communication because the verify_outgoing setting is improperly documented
    cvelistv5