CVE-2020-7955

HashiCorp Consul and Consul Enterprise 1.4.1 through 1.6.2 did not uniformly enforce ACLs across all API endpoints, resulting in potential unintended...

Original description

The description as published by the source.

HashiCorp Consul and Consul Enterprise 1.4.1 through 1.6.2 did not uniformly enforce ACLs across all API endpoints, resulting in potential unintended information disclosure. Fixed in 1.6.3.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Affected packages

Bitnami consul

[{"type":"SEMVER","events":[{"introduced":"1.4.1"},{"fixed":"1.6.2"}]}]

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2020-7955 consul Fixed in: 1.7.0+dfsg1-1

References

advisory github.com
advisory hashicorp.com
web nvd.nist.gov