CVE-2020-13170: Improper Input Validation

June 11, 2020 (updated June 17, 2020)

HashiCorp Consul and Consul Enterprise do not appropriately enforce scope for local tokens issued by a primary data center, where replication to a secondary data center was not enabled.

References

nvd.nist.gov/vuln/detail/CVE-2020-13170

Code Behaviors & Features

Detect and mitigate CVE-2020-13170 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →