HashiCorp Consul and Consul Enterprise 1.2.0 up to 1.8.5 allowed operators with operator:read ACL permissions to read the Connect CA private key configuration. Fixed in 1.6.10, 1.7.10, and 1.8.6.
{ "binaries": [ { "binary_name": "consul", "binary_version": "0.6.4~dfsg-3" }, { "binary_name": "golang-github-hashicorp-consul-dev", "binary_version": "0.6.4~dfsg-3" } ] }
{ "binaries": [ { "binary_name": "consul", "binary_version": "1.5.2+dfsg2-14" }, { "binary_name": "golang-github-hashicorp-consul-dev", "binary_version": "1.5.2+dfsg2-14" } ] }
{ "binaries": [ { "binary_name": "consul", "binary_version": "1.8.7+dfsg1-3" }, { "binary_name": "golang-github-hashicorp-consul-dev", "binary_version": "1.8.7+dfsg1-3" } ] }