En resumen
- CVE-2020-28053 es una vulnerabilidad MEDIO (CVSS 6.5) que afecta a github.com/hashicorp/consul, consul (hashicorp).
- Probabilidad de explotación en los próximos 30 días (EPSS): 1.5%, mayor que el 73.4% de las vulnerabilidades.
- Solución: actualizar a 1.6.10, 1.7.10, 1.8.6 o posterior.
| Package | Affected versions | Patched versions |
|---|
| github.com/hashicorp/consul Go | ≥ 1.2.0, < 1.6.10≥ 1.7.0, < 1.7.10≥ 1.8.0, < 1.8.6
| 1.6.101.7.101.8.6
|
| consul | ≥ 1.2.0, < 1.6.10≥ 1.7.0, < 1.7.10≥ 1.8.0, < 1.8.6
| 1.6.101.7.101.8.6
|
Description
HashiCorp Consul and Consul Enterprise 1.2.0 up to 1.8.5 allowed operators with operator:read ACL permissions to read the Connect CA private key configuration. Fixed in 1.6.10, 1.7.10, and 1.8.6.
NVD description
HashiCorp Consul and Consul Enterprise 1.2.0 up to 1.8.5 allowed operators with operator:read ACL permissions to read the Connect CA private key configuration. Fixed in 1.6.10, 1.7.10, and 1.8.6.
Más vulnerabilidades de github.com/hashicorp/consul
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free