Debian/consul: medium 6.5
HashiCorp Consul and Consul Enterprise 1.2.0 up to 1.8.5 allowed operators with operator:read ACL permissions to read the Connect CA private key configuration. Fixed in 1.6.10, 1.7.10, and 1.8.6.
Action: Upgrade consul to 1.8.6+dfsg1-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.8.6+dfsg1-1 | - |
Fixed versions
| 1.8.6+dfsg1-1 |
Sources
published · modified · JSON