Debian/consul: medium 5.3
HashiCorp Consul and Consul Enterprise 1.4.1 through 1.6.2 did not uniformly enforce ACLs across all API endpoints, resulting in potential unintended information disclosure. Fixed in 1.6.3.
Action: Upgrade consul to 1.7.0+dfsg1-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.7.0+dfsg1-1 | - |
Fixed versions
| 1.7.0+dfsg1-1 |
Sources
published · modified · JSON