CVE-2019-12291

HashiCorp Consul 1.4.0 through 1.5.0 has Incorrect Access Control. Keys not matching a specific ACL rule used for prefix matching in a policy can be deleted by a token using that policy even with default deny settings configured.
References
Link Resource
https://github.com/hashicorp/consul/issues/5888 Mitigation Issue Tracking Patch Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:hashicorp:consul:*:*:*:*:*:*:*:*

Information

Published : 2019-06-06 10:29

Updated : 2020-08-24 10:37


NVD link : CVE-2019-12291

Mitre link : CVE-2019-12291


JSON object : View

Advertisement

dedicated server usa

Products Affected

hashicorp

  • consul