CVE-2019-8336

2019-03-0523:00:00

mitre

www.cve.org

8.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.9%

JSON

HashiCorp Consul (and Consul Enterprise) 1.4.x before 1.4.3 allows a client to bypass intended access restrictions and obtain the privileges of one other arbitrary token within secondary datacenters, because a token with literally “<hidden>” as its secret is used in unusual circumstances.