RubyGems/consul CVE-2019-16377: critical 9.8, EPSS 2.64%

Consul gem insufficient authentication check - Multiple powers in one controller are not always checked correctly

Action: Upgrade consul to 1.0.3 or later.

bundle update consul

Affected

Fixed versions

Sources

• osv: GHSA-8jhx-9gf4-hhf5
• https://nvd.nist.gov/vuln/detail/CVE-2019-16377
• https://github.com/makandra/consul/issues/49
• https://github.com/makandra/consul
• https://github.com/rubysec/ruby-advisory-db/blob/c26fbc13435b8be448ad59131428538049d165e4/gems/consul/CVE-2019-16377.yml
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/consul/CVE-2019-16377.yml
• https://rubygems.org/gems/consul

CVE-2019-16377 · published 2019-09-27T20:01:00Z · modified 2024-02-16T08:24:38.297974Z · JSON