CVE-2019-19879 - HashiCorp Sentinel up to 0.10.1 incorrectly parsed negation in certain policy expressions

HIGH

HashiCorp Sentinel up to 0.10.1 incorrectly parsed negation in certain policy expressions

Published Feb 14, 2020

7.5

HIGH

CVSS 3.1

EPSS 1.19%

HashiCorp Sentinel up to 0.10.1 incorrectly parsed negation in certain policy expressions. Fixed in 0.10.2.

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

Link	Providers	Tags
https://discuss.hashicorp.com/t/security-bulletin-sentinel-incorrectly-parses-negation-in-certain-policy-expressions/5955		x_refsource_MISCExploitVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-9472		Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Feb 14, 2020

Updated Aug 5, 2024

Reserved Dec 18, 2019

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner mitre

Published Feb 14, 2020

Updated Aug 5, 2024

Exploited since n/a