GHSA-fhm8-cxcv-pwvcHighCVSS 8.1

HashiCorp Consul Access Restriction Bypass

Published
May 13, 2022
Last Modified
September 28, 2023

🔗 CVE IDs covered (1)

CVE-2019-8336 →

📋 Description

HashiCorp Consul (and Consul Enterprise) 1.4.x before 1.4.3 allows a client to bypass intended access restrictions and obtain the privileges of one other arbitrary token within secondary datacenters, because a token with literally "" as its secret is used in unusual circumstances.

🎯 Affected products1

  • go/github.com/hashicorp/consul:>= 1.4.0, < 1.4.3

🔗 References (5)