Vulnerability Details CVE-2022-38149
HashiCorp Consul Template up to 0.27.2, 0.28.2, and 0.29.1 may expose the contents of Vault secrets in the error returned by the *template.Template.Execute method, when given a template using Vault secret contents incorrectly. Fixed in 0.27.3, 0.28.3, and 0.29.2.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 47.3%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2022-38149
-
cpe:2.3:a:hashicorp:consul_template:0.1.0
-
cpe:2.3:a:hashicorp:consul_template:0.1.1
-
cpe:2.3:a:hashicorp:consul_template:0.10.0
-
cpe:2.3:a:hashicorp:consul_template:0.11.0
-
cpe:2.3:a:hashicorp:consul_template:0.11.1
-
cpe:2.3:a:hashicorp:consul_template:0.12.0
-
cpe:2.3:a:hashicorp:consul_template:0.12.1
-
cpe:2.3:a:hashicorp:consul_template:0.12.2
-
cpe:2.3:a:hashicorp:consul_template:0.13.0
-
cpe:2.3:a:hashicorp:consul_template:0.14.0
-
cpe:2.3:a:hashicorp:consul_template:0.15.0
-
cpe:2.3:a:hashicorp:consul_template:0.16.0
-
cpe:2.3:a:hashicorp:consul_template:0.18.0
-
cpe:2.3:a:hashicorp:consul_template:0.18.1
-
cpe:2.3:a:hashicorp:consul_template:0.18.2
-
cpe:2.3:a:hashicorp:consul_template:0.18.3
-
cpe:2.3:a:hashicorp:consul_template:0.18.4
-
cpe:2.3:a:hashicorp:consul_template:0.18.5
-
cpe:2.3:a:hashicorp:consul_template:0.19.0
-
cpe:2.3:a:hashicorp:consul_template:0.19.1
-
cpe:2.3:a:hashicorp:consul_template:0.19.2
-
cpe:2.3:a:hashicorp:consul_template:0.19.3
-
cpe:2.3:a:hashicorp:consul_template:0.19.4
-
cpe:2.3:a:hashicorp:consul_template:0.19.5
-
cpe:2.3:a:hashicorp:consul_template:0.2.0
-
cpe:2.3:a:hashicorp:consul_template:0.20.0
-
cpe:2.3:a:hashicorp:consul_template:0.20.1
-
cpe:2.3:a:hashicorp:consul_template:0.21.0
-
cpe:2.3:a:hashicorp:consul_template:0.21.1
-
cpe:2.3:a:hashicorp:consul_template:0.21.2
-
cpe:2.3:a:hashicorp:consul_template:0.21.3
-
cpe:2.3:a:hashicorp:consul_template:0.22.0
-
cpe:2.3:a:hashicorp:consul_template:0.22.1
-
cpe:2.3:a:hashicorp:consul_template:0.23.0
-
cpe:2.3:a:hashicorp:consul_template:0.24.0
-
cpe:2.3:a:hashicorp:consul_template:0.24.1
-
cpe:2.3:a:hashicorp:consul_template:0.25.0
-
cpe:2.3:a:hashicorp:consul_template:0.25.1
-
cpe:2.3:a:hashicorp:consul_template:0.25.2
-
cpe:2.3:a:hashicorp:consul_template:0.26.0
-
cpe:2.3:a:hashicorp:consul_template:0.27.0
-
cpe:2.3:a:hashicorp:consul_template:0.27.1
-
cpe:2.3:a:hashicorp:consul_template:0.27.2
-
cpe:2.3:a:hashicorp:consul_template:0.28.0
-
cpe:2.3:a:hashicorp:consul_template:0.28.1
-
cpe:2.3:a:hashicorp:consul_template:0.29.0
-
cpe:2.3:a:hashicorp:consul_template:0.29.1
-
cpe:2.3:a:hashicorp:consul_template:0.3.0
-
cpe:2.3:a:hashicorp:consul_template:0.3.1
-
cpe:2.3:a:hashicorp:consul_template:0.4.0
-
cpe:2.3:a:hashicorp:consul_template:0.5.0
-
cpe:2.3:a:hashicorp:consul_template:0.5.1
-
cpe:2.3:a:hashicorp:consul_template:0.6.0
-
cpe:2.3:a:hashicorp:consul_template:0.6.1
-
cpe:2.3:a:hashicorp:consul_template:0.6.5
-
cpe:2.3:a:hashicorp:consul_template:0.7.0
-
cpe:2.3:a:hashicorp:consul_template:0.8.0
-
cpe:2.3:a:hashicorp:consul_template:0.9.0