PT-2024-8623 · Hashicorp+4 · Hashicorp Consul+4

Published 2024-10-30 · Updated 2026-04-30 · CVE-2024-10005

Positive Technologies (AI Summary)

CVSS v4.0

8.6

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Consul versions 1.9.0 through 1.20.1

Description A vulnerability was identified in Consul such that using URL paths in L7 traffic intentions could bypass HTTP request path-based access rules. This issue allows a remote attacker to bypass security restrictions using a specially crafted HTTP request.

Recommendations For Consul versions 1.9.0 through 1.20.1, update to the latest version to resolve the issue. As a temporary workaround, consider restricting access to L7 traffic intentions until a patch is available.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

ALT-PU-2024-15498

BDU:2024-10201

BIT-CONSUL-2024-10005

CLEANSTART-2026-AD71344

CLEANSTART-2026-CN84623

CLEANSTART-2026-DB61851

CLEANSTART-2026-DP35743

CLEANSTART-2026-GY48351

CLEANSTART-2026-SO13464

CVE-2024-10005

GHSA-CHGM-7R52-WHJJ

GO-2024-3243

OPENSUSE-SU-2024:0350-1

OPENSUSE-SU-2024:14458-1

OPENSUSE-SU-2024_3950-1

SUSE-SU-2024:3950-1

Affected Products

Alt Linux

Hashicorp Consul

Debian

Red Os

Suse

References · 183

• https://nvd.nist.gov/vuln/detail/CVE-2026-1229 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-27139 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:0350-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-10005 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-4660 · Security Note
• https://osv.dev/vulnerability/CLEANSTART-2026-GY48351 · Vendor Advisory
• https://osv.dev/vulnerability/CLEANSTART-2026-SO13464 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-10005 · Security Note
• https://bdu.fstec.ru/vul/2024-10201 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-32282 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2024:3950-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-33810 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2024-10005 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-47913 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-61728 · Security Note