Security Advisory

CVE-2023-3518

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-08-09 15:06:52
Last updated 2024-10-08 14:56:28
Assigner HashiCorp
State PUBLISHED

Description

HashiCorp Consul and Consul Enterprise 1.16.0 when using JWT Auth for service mesh incorrectly allows/denies access regardless of service identities. Fixed in 1.16.1.