GHSA-p2j5-3f4c-224rMediumCVSS 5.3

Improper Input Validation in HashiCorp Consul

Published
May 18, 2021
Last Modified
October 2, 2023

🔗 CVE IDs covered (1)

CVE-2020-13170 →

📋 Description

HashiCorp Consul and Consul Enterprise did not appropriately enforce scope for local tokens issued by a primary data center, where replication to a secondary data center was not enabled. Introduced in 1.4.0, fixed in 1.6.6 and 1.7.4.

Specific Go Packages Affected

github.com/hashicorp/consul/agent

🎯 Affected products2

  • go/github.com/hashicorp/consul:>= 1.6.0-beta1, < 1.6.6
  • go/github.com/hashicorp/consul:>= 1.7.0, < 1.7.4

🔗 References (6)