HashiCorp Nomad and Nomad Enterprise 0.9.2 through 1.0.17, 1.1.11, and 1.2.5 allow operators with read-fs and alloc-exec (or job-submit) capabilities to read arbitrary files on the host filesystem as root.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Alpine | 3.15-community | noarch | nomad | < 1.1.12-r0 | UNKNOWN |
Alpine | 3.16-community | noarch | nomad | < 1.2.6-r0 | UNKNOWN |
Alpine | 3.17-community | noarch | nomad | < 1.2.6-r0 | UNKNOWN |
Alpine | 3.18-community | noarch | nomad | < 1.2.6-r0 | UNKNOWN |