Skip to content
OpenAdvisories

Archive

11 June 2020

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Medium 5.3

    Improper Input Validation in HashiCorp Consul

    HashiCorp Consul and Consul Enterprise did not appropriately enforce scope for local tokens issued by a primary data center, where replication to a secondary data center was not enabled. Introduced in 1.4.0, fixed in 1.6.6 and 1.7.4.

  • Medium 5.3

    Incorrect Permission Assignment for Critical Resource in Hashicorp Consul

    HashiCorp Consul and Consul Enterprise failed to enforce changes to legacy ACL token rules due to non-propagation to secondary data centers. Introduced in 1.4.0, fixed in 1.6.6 and 1.7.4.

  • Medium 5.3

    Denial of Service (DoS) in HashiCorp Consul

    HashiCorp Consul and Consul Enterprise could crash when configured with an abnormally-formed service-router entry. Introduced in 1.6.0, fixed in 1.6.6 and 1.7.4.

  • Medium 4.3

    The Rolling Proximity Identifier used in the Apple/Google Exposure Notification API beta through 2020-05-29 enables att…

  • Medium 5.4

    IBM Workload Scheduler 9.3.0.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrar…