CVE-2020-7955

HashiCorp Consul and Consul Enterprise 1.4.1 through 1.6.2 did not uniformly enforce ACLs across all API endpoints, resulting in potential unintended…

published January 31, 2020

CVSS
—
EPSS
1%
Percentile
72.5
In the wild
Unconfirmed
What it is

HashiCorp Consul and Consul Enterprise 1.4.1 through 1.6.2 did not uniformly enforce ACLs across all API endpoints, resulting in potential unintended information disclosure. Fixed in 1.6.3.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01412 · 72.5th percentile
Published
2020-01-31T12:19Z
EPSS history
Timeline
  • 31 JAN 12:19Z
    HashiCorp Consul and Consul Enterprise 1.4.1 through 1.6.2 did not uniformly enforce ACLs across all API endpoints, resulting in potential unintended…
    cvelistv5