CVE-2023-2816

HIGH8.7EPSS 0.17%

Consul Envoy Extension Downsteam Proxy Configuration By Upstream Service Owner

Published: 6/3/2023Modified: 5/20/2025

Also known as:GHSA-rqjq-ww83-wv5cBIT-consul-2023-2816GO-2023-1828

Description

Consul and Consul Enterprise allowed any user with service:write permissions to use Envoy extensions configured via service-defaults to patch remote proxy instances that target the configured service, regardless of whether the user has permission to modify the service(s) corresponding to those modified proxies.

Affected packages (3)

Bitnami/consul>= 1.15.0, < 1.15.3
Go/github.com/hashicorp/consul>= 1.15.0, < 1.15.3
Go/github.com/hashicorp/consul>= 1.15.0, < 1.15.3

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	HIGH8.7	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N

References (4)

ADVISORYhttps://github.com/advisories/GHSA-rqjq-ww83-wv5c
ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2023-2816
PATCHhttps://github.com/hashicorp/consul
WEBhttps://discuss.hashicorp.com/t/hcsec-2023-16-consul-envoy-extension-downstream-proxy-configuration-by-upstream-service-owner/54525