x/vulndb: potential Go vuln in github.com/hashicorp/consul: GHSA-r9w6-rhh9-7v53

[GoVulnBot]

In GitHub Security Advisory GHSA-r9w6-rhh9-7v53, there is a vulnerability in the following Go packages or modules:

Unit	Fixed	Vulnerable Ranges
github.com/hashicorp/consul	1.6.3	>= 1.4.1, <= 1.6.2

Cross references:

• CVE-2020-7955 appears in issue x/vulndb: potential Go vuln in github.com/hashicorp/consul: GHSA-r9w6-rhh9-7v53 #874 NOT_IMPORTABLE
• GHSA-r9w6-rhh9-7v53 appears in issue x/vulndb: potential Go vuln in github.com/hashicorp/consul: GHSA-r9w6-rhh9-7v53 #874 NOT_IMPORTABLE

See doc/triage.md for instructions on how to triage this report.

modules:
  - module: TODO
    versions:
      - introduced: TODO (earliest fixed "1.6.3", vuln range ">= 1.4.1, <= 1.6.2")
    packages:
      - package: github.com/hashicorp/consul
description: HashiCorp Consul and Consul Enterprise 1.4.1 through 1.6.2 did not uniformly
    enforce ACLs across all API endpoints, resulting in potential unintended information
    disclosure. Fixed in 1.6.3.
cves:
  - CVE-2020-7955
ghsas:
  - GHSA-r9w6-rhh9-7v53

[tatianab]

Duplicate of #874