Is CVE-2019-8336 actively exploited?

No active exploitation of CVE-2019-8336 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2019-8336 be exploited remotely?

Yes. CVE-2019-8336 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2019-8336?

CVE-2019-8336 has a CVSS score of 8.1 (HIGH).

HOME VULNERABILITIESCVE-2019-8336

HIGH

CVE-2019-8336

NVD-CWE-noinfoPublished: March 5, 2019· Updated: Jun 17, 2026

8.1

CVSS v3.1

Official Description

HashiCorp Consul (and Consul Enterprise) 1.4.x before 1.4.3 allows a client to bypass intended access restrictions and obtain the privileges of one other arbitrary token within secondary datacenters, because a token with literally "<hidden>" as its secret is used in unusual circumstances.

NVD Source

Technical Analysis

CVE-2019-8336 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 8.1.