CVE-2020-13170

HashiCorp Consul and Consul Enterprise did not appropriately enforce scope for local tokens issued by a primary data center, where replication to a secondary…

published June 11, 2020

CVSS
—
EPSS
2%
Percentile
77.4
In the wild
Unconfirmed
What it is

HashiCorp Consul and Consul Enterprise did not appropriately enforce scope for local tokens issued by a primary data center, where replication to a secondary data center was not enabled. Introduced in 1.4.0, fixed in 1.6.6 and 1.7.4.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01725 · 77.4th percentile
Published
2020-06-11T19:41Z
EPSS history
Timeline
  • 11 JUN 19:41Z
    HashiCorp Consul and Consul Enterprise did not appropriately enforce scope for local tokens issued by a primary data center, where replication to a secondary…
    cvelistv5