HashiCorp Consul (and Consul Enterprise) 1.4.x before 1.4.3 allows a client to bypass intended access restrictions and obtain the privileges of one other arbitrary token within secondary datacenters, because a token with literally "<hidden>" as its secret is used in unusual circumstances.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2019-03-05T23:00:00

Updated: 2024-08-04T21:17:31.211Z

Reserved: 2019-02-13T00:00:00

Link: CVE-2019-8336

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2019-03-05T23:29:02.863

Modified: 2020-08-24T17:37:01.140

Link: CVE-2019-8336

cve-icon Redhat

No data.