CVE-2020-7955

Publication date

2020-01-31 12:19:40

Family

mitre

State

PUBLISHED

Description

HashiCorp Consul and Consul Enterprise 1.4.1 through 1.6.2 did not uniformly enforce ACLs across all API endpoints, resulting in potential unintended information disclosure. Fixed in 1.6.3.