CVE-2020-12797

HashiCorp Consul and Consul Enterprise failed to enforce changes to legacy ACL token rules due to non-propagation to secondary data centers

published June 11, 2020

CVSS
—
EPSS
2%
Percentile
74.3
In the wild
Unconfirmed
What it is

HashiCorp Consul and Consul Enterprise failed to enforce changes to legacy ACL token rules due to non-propagation to secondary data centers. Introduced in 1.4.0, fixed in 1.6.6 and 1.7.4.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01510 · 74.3th percentile
Published
2020-06-11T19:37Z
EPSS history
Timeline
  • 11 JUN 19:37Z
    HashiCorp Consul and Consul Enterprise failed to enforce changes to legacy ACL token rules due to non-propagation to secondary data centers
    cvelistv5