Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-8336
6.8
MEDIUMCVSS v2
Published
March 5, 2019
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
HashiCorp Consul (and Consul Enterprise) 1.4.x before 1.4.3 allows a client to bypass intended access restrictions and obtain the privileges of one other arbitrary token within secondary datacenters, because a token with literally "<hidden>" as its secret is used in unusual circumstances.
hashicorp/consul
GitHubConsul is a distributed, highly available, and data center aware solution to connect and configure applications across dynamic, distributed infrastructure.
GitHubConsul is a distributed, highly available, and data center aware solution to connect and configure applications across dynamic, distributed infrastructure.>= 1.4.0, < 1.4.3NVD