HashiCorp Consul and Consul Enterprise 1.3.0 through 1.10.0 Envoy proxy TLS configuration does not validate destination service identity in the encoded subject alternative name. Fixed in 1.8.14, 1.9.8, and 1.10.1.
| Software | From | Fixed in |
|---|---|---|
| hashicorp / consul | 1.10.0 | 1.10.1 |
| hashicorp / consul | 1.3.0 | 1.8.14 |
| hashicorp / consul | 1.9.0 | 1.9.8 |
github.com/hashicorp/consul
|
- | 1.10.1 |