CVE-2023-3518 — JWT Auth in L7 Intentions Allow For Mismatched Service Identity and JWT Providers for Access
HashiCorp Consul and Consul Enterprise 1.16.0 when using JWT Auth for service mesh incorrectly allows/denies access regardless of service identities. Fixed in 1.16.1.
Published: 2023-08-09 · CVSS: 7.4 · CVSS 3.1
HashiCorp Consul and Consul Enterprise 1.16.0 when using JWT Auth for service mesh incorrectly allows/denies access regardless of service identities. Fixed in 1.16.1.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7