Photon OS 3.0: Consul PHSA-2020-3.0-0151

An update of the consul package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0151. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2020-13170

HashiCorp Consul and Consul Enterprise did not appropriately enforce scope for local tokens issued by a primary data center, where replication to a secondary data center was not enabled. Introduced in 1.4.0, fixed in 1.6.6 and 1.7.4...

CVE-2020-13170

CVE-2020-13170 affects HashiCorp Consul and Consul Enterprise. The issue is that the system did not properly enforce scope for local tokens issued by the primary data center when replication to a secondary data center was not enabled. This mis-scoping could lead to tokens being usable across data...