Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2021-43415
HistoryDec 03, 2021 - 10:15 p.m.

CVE-2021-43415

2021-12-0322:15:00
Debian Security Bug Tracker
security-tracker.debian.org
10

0.001 Low

EPSS

Percentile

42.9%

HashiCorp Nomad and Nomad Enterprise up to 1.0.13, 1.1.7, and 1.2.0, with the QEMU task driver enabled, allowed authenticated users with job submission capabilities to bypass the configured allowed image paths. Fixed in 1.0.14, 1.1.8, and 1.2.1.

OSVersionArchitecturePackageVersionFilename
Debian11allnomad<= 0.12.10+dfsg1-3nomad_0.12.10+dfsg1-3_all.deb

0.001 Low

EPSS

Percentile

42.9%