CVE-2020-28053 log

Severity Medium
Remote Yes
Type Privilege escalation
HashiCorp Consul and Consul Enterprise 1.2.0 up to 1.8.5 allowed operators with operator:read ACL permissions to read the Connect CA private key configuration when explicitly configured with the /v1/connect/ca/configuration endpoint, including the private key. This allows the user to effectively privilege escalate by enabling the ability to mint certificates for any Consul Connect services. This would potentially allow them to masquerade (receive/send traffic) as any service in the mesh.
Group Package Affected Fixed Severity Status Ticket
AVG-1294 consul 1.7.4-1 1.9.1-1 Medium Fixed FS#68723