Lucene search

K
osvGoogleOSV:GHSA-R9W6-RHH9-7V53
HistoryJul 28, 2021 - 5:57 p.m.

Incorrect Authorization in HashiCorp Consul

2021-07-2817:57:57
Google
osv.dev
5

0.001 Low

EPSS

Percentile

38.9%

HashiCorp Consul and Consul Enterprise 1.4.1 through 1.6.2 did not uniformly enforce ACLs across all API endpoints, resulting in potential unintended information disclosure. Fixed in 1.6.3.

0.001 Low

EPSS

Percentile

38.9%