HashiCorp Consul and Consul Enterprise 1.2.0 up to 1.8.5 allowed operators with operator:read ACL permissions to read the Connect CA private key configuration. Fixed in 1.6.10, 1.7.10, and 1.8.6.
{ "binaries": [ { "binary_version": "0.6.4~dfsg-3", "binary_name": "consul" }, { "binary_version": "0.6.4~dfsg-3", "binary_name": "golang-github-hashicorp-consul-dev" } ] }
{ "binaries": [ { "binary_version": "1.5.2+dfsg2-14", "binary_name": "consul" }, { "binary_version": "1.5.2+dfsg2-14", "binary_name": "golang-github-hashicorp-consul-dev" } ] }
{ "binaries": [ { "binary_version": "1.8.7+dfsg1-3", "binary_name": "consul" }, { "binary_version": "1.8.7+dfsg1-3", "binary_name": "golang-github-hashicorp-consul-dev" } ] }