Lucene search
GoogleOSV:GHSA-FHM8-CXCV-PWVCHistoryMay 13, 2022 - 1:22 a.m.
HashiCorp Consul Access Restriction Bypass
2022-05-1301:22:55
Google
osv.dev
6
HashiCorp Consul (and Consul Enterprise) 1.4.x before 1.4.3 allows a client to bypass intended access restrictions and obtain the privileges of one other arbitrary token within secondary datacenters, because a token with literally “<hidden>” as its secret is used in unusual circumstances.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/hashicorp/consul | ge | 1.4.0 | |
| github.com/hashicorp/consul | lt | 1.4.3 |
Related
nvd
nvd
CVE-2019-8336
2019-03-05 23:29:02
debiancve
debiancve
CVE-2019-8336
2019-03-05 23:29:02
ubuntucve
ubuntucve
CVE-2019-8336
2019-03-05 00:00:00
prion
prion
Security feature bypass
2019-03-05 23:29:00
github
github
HashiCorp Consul Access Restriction Bypass
2022-05-13 01:22:55
osv
osv
CVE-2019-8336
2019-03-05 23:29:02
veracode
veracode
Privilege Escalation
2019-03-06 05:12:44
cve
cve
CVE-2019-8336
2019-03-05 23:29:02
cvelist
cvelist
CVE-2019-8336
2019-03-05 23:00:00