{"action":"Upgrade consul to 1.0.3 or later.","affected":[{"fixed":"1.0.3","introduced":"0"}],"component":"consul","cve_ids":["CVE-2019-16377"],"ecosystem":"RubyGems","epss":0.02643,"exploited":false,"fixed_versions":["1.0.3"],"ghsa_id":"GHSA-8jhx-9gf4-hhf5","id":"tcs_01M5KEJ2A77Q1SFBT8SKXERTT9","modified_at":"2024-02-16T08:24:38.297974Z","published_at":"2019-09-27T20:01:00Z","references":["https://osv.dev/vulnerability/GHSA-8jhx-9gf4-hhf5","https://nvd.nist.gov/vuln/detail/CVE-2019-16377","https://github.com/makandra/consul/issues/49","https://github.com/makandra/consul","https://github.com/rubysec/ruby-advisory-db/blob/c26fbc13435b8be448ad59131428538049d165e4/gems/consul/CVE-2019-16377.yml","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/consul/CVE-2019-16377.yml","https://rubygems.org/gems/consul"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-8jhx-9gf4-hhf5","url":"https://osv.dev/vulnerability/GHSA-8jhx-9gf4-hhf5"}],"summary":"Consul gem insufficient authentication check - Multiple powers in one controller are not always checked correctly"}