HashiCorp Nomad 1.5.0 allows job submitter to escalate privileges. Fixed in 1.5.1
Reporter | Title | Published | Views | Family All 13 |
---|---|---|---|---|
![]() | Privilege Escalation | 15 Mar 202303:49 | – | veracode |
![]() | CVE-2023-1299 | 14 Mar 202315:15 | – | osv |
![]() | GO-2023-1633 Nomad Job Submitter Privilege Escalation Using Workload Identity in github.com/hashicorp/nomad | 20 Aug 202420:29 | – | osv |
![]() | Nomad Job Submitter Privilege Escalation Using Workload Identity | 14 Mar 202315:30 | – | osv |
![]() | CVE-2023-1299 | 14 Mar 202315:15 | – | nvd |
![]() | CVE-2023-1299 Nomad Job Submitter Privilege Escalation Using Workload Identity | 14 Mar 202314:46 | – | cvelist |
![]() | CVE-2023-1299 | 14 Mar 202315:15 | – | alpinelinux |
![]() | CVE-2023-1299 Nomad Job Submitter Privilege Escalation Using Workload Identity | 14 Mar 202314:46 | – | vulnrichment |
![]() | Denial of service | 14 Mar 202315:15 | – | prion |
![]() | CVE-2023-1299 | 14 Mar 202315:15 | – | debiancve |
[
{
"vendor": "HashiCorp",
"product": "Nomad",
"platforms": [
"64 bit",
"32 bit",
"x86",
"ARM",
"MacOS",
"Windows",
"Linux"
],
"repo": "https://github.com/hashicorp/nomad",
"versions": [
{
"status": "affected",
"version": "1.5.0"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "HashiCorp",
"product": "Nomad Enterprise",
"platforms": [
"64 bit",
"32 bit",
"x86",
"ARM",
"MacOS",
"Windows",
"Linux"
],
"versions": [
{
"status": "affected",
"version": "1.5.0"
}
],
"defaultStatus": "unaffected"
}
]
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo