Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-12291
6.4
MEDIUMCVSS v2
Published
June 6, 2019
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
HashiCorp Consul 1.4.0 through 1.5.0 has Incorrect Access Control. Keys not matching a specific ACL rule used for prefix matching in a policy can be deleted by a token using that policy even with default deny settings configured.
hashicorp/consul
GitHubConsul is a distributed, highly available, and data center aware solution to connect and configure applications across dynamic, distributed infrastructure.
GitHubConsul is a distributed, highly available, and data center aware solution to connect and configure applications across dynamic, distributed infrastructure.>= 1.4.0, <= 1.5.0NVD