mirror of https://github.com/status-im/consul.git
3 lines
361 B
Plaintext
3 lines
361 B
Plaintext
```release-note:security
|
|
Increase the permissions to read from the `/connect/ca/configuration` endpoint to `operator:write`. Previously Connect CA configuration, including the private key, set via this endpoint could be read back by an operator with `operator:read` privileges. [CVE-2020-28053](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28053)
|
|
``` |