—
GO-2022-0847
Incorrect Permission Assignment for Critical Resource in Hashicorp Consul in github.com/hashicorp/consul
Quick fix
GO-2022-0847 — github.com/hashicorp/consul: upgrade to the fixed version with the command below.
go get github.com/hashicorp/consul@v1.6.6Details
Incorrect Permission Assignment for Critical Resource in Hashicorp Consul in github.com/hashicorp/consul
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/hashicorp/consul
Introduced in:
1.6.0Fixed in: 1.6.6Fix
go get github.com/hashicorp/consul@v1.6.6References
- https://github.com/advisories/GHSA-hwqm-x785-qh8p[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2020-12797[ADVISORY]
- https://github.com/hashicorp/consul/commit/98eea08d3ba1b220a14cf6eedf3b6b07ae2795d7[FIX]
- https://github.com/hashicorp/consul/pull/8047[FIX]
- https://github.com/hashicorp/consul/issues/5606[REPORT]
- https://github.com/hashicorp/consul/blob/v1.6.6/CHANGELOG.md[WEB]
- https://github.com/hashicorp/consul/blob/v1.7.4/CHANGELOG.md[WEB]