HashiCorp Consul and Consul Enterprise Arbitrary File Read Vulnerability in Kubernetes Authentication

A vulnerability allowing arbitrary file read has been identified in HashiCorp Consul and Consul Enterprise versions 1.18.20 prior to 1.21.10 and 1.22.4. This issue arises when Consul is configured to use Kubernetes authentication, allowing a privileged attacker to exploit the vulnerability by reading files from the Consul server host, potentially leading to unauthorized access to sensitive data.

Impact

Exploitation of this vulnerability could result in unauthorized arbitrary file reads from the Consul server host, with the potential for sensitive data leakage.

Remediation

Users are advised to upgrade to Consul Community Edition 1.22.5 or Consul Enterprise versions 1.18.21, 1.21.11 or 1.22.5. Consult Consul's upgrading documentation for guidance on the upgrade process.