Lucene search
+L

1134 matches found

SUSE CVE
SUSE CVE
•added 2024/12/23 4:04 a.m.•13 views

SUSE CVE-2024-12678

Nomad Community and Nomad Enterprise "Nomad" allocations are vulnerable to privilege escalation within a namespace through unredacted workload identity tokens. This vulnerability, identified as CVE-2024-12678, is fixed in Nomad Community Edition 1.9.4 and Nomad Enterprise 1.9.4, 1.8.8, and 1.7.16...

6.5CVSS7.1AI score0.00529EPSS
SaveExploits0References4
OSV
OSV
•added 2024/12/20 8:36 p.m.•22 views

GO-2024-3354 Hashicorp Nomad Incorrect Privilege Assignment vulnerability in github.com/hashicorp/nomad

Hashicorp Nomad Incorrect Privilege Assignment vulnerability in github.com/hashicorp/nomad...

6.5CVSS6.5AI score0.00529EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2024/12/20 6:20 a.m.•17 views

CVE-2024-12678

A flaw was found in hashicorp/nomad. Affected versions of this package are vulnerable to privilege escalation within a namespace through unredacted workload identity tokens...

6.5CVSS6.8AI score0.00529EPSS
SaveExploits0References4
OSV
OSV
•added 2024/12/20 3:30 a.m.•24 views

GHSA-HR68-HVGV-XXQF Hashicorp Nomad Incorrect Privilege Assignment vulnerability

Nomad Community and Nomad Enterprise "Nomad" allocations are vulnerable to privilege escalation within a namespace through unredacted workload identity tokens. This vulnerability, identified as CVE-2024-12678, is fixed in Nomad Community Edition 1.9.4 and Nomad Enterprise 1.9.4, 1.8.8, and 1.7.16...

6.5CVSS6.6AI score0.00529EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2024/12/20 3:30 a.m.•34 views

Hashicorp Nomad Incorrect Privilege Assignment vulnerability

Nomad Community and Nomad Enterprise "Nomad" allocations are vulnerable to privilege escalation within a namespace through unredacted workload identity tokens. This vulnerability, identified as CVE-2024-12678, is fixed in Nomad Community Edition 1.9.4 and Nomad Enterprise 1.9.4, 1.8.8, and 1.7.16...

6.5CVSS7AI score0.00529EPSS
SaveExploits0References4Affected Software1
NVD
NVD
•added 2024/12/20 2:15 a.m.•37 views

CVE-2024-12678

Nomad Community and Nomad Enterprise "Nomad" allocations are vulnerable to privilege escalation within a namespace through unredacted workload identity tokens. This vulnerability, identified as CVE-2024-12678, is fixed in Nomad Community Edition 1.9.4 and Nomad Enterprise 1.9.4, 1.8.8, and 1.7.16...

6.5CVSS0.00529EPSS
SaveExploits0References1
OSV
OSV
•added 2024/12/20 2:15 a.m.•19 views

UBUNTU-CVE-2024-12678

Nomad Community and Nomad Enterprise "Nomad" allocations are vulnerable to privilege escalation within a namespace through unredacted workload identity tokens. This vulnerability, identified as CVE-2024-12678, is fixed in Nomad Community Edition 1.9.4 and Nomad Enterprise 1.9.4, 1.8.8, and 1.7.16...

6.5CVSS6.6AI score0.00529EPSS
SaveExploits0References3
Mend
Mend
•added 2024/12/20 1:49 a.m.•3 views

CVE-2024-12678

Nomad Community and Nomad Enterprise "Nomad" allocations are vulnerable to privilege escalation within a namespace through unredacted workload identity tokens. This vulnerability, identified as CVE-2024-12678, is fixed in Nomad Community Edition 1.9.4 and Nomad Enterprise 1.9.4, 1.8.8, and 1.7.16...

7.1CVSS0.00529EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2024/12/20 1:49 a.m.•19 views

CVE-2024-12678 Nomad Allocations Vulnerable To Privilege Escalation Within A Namespace Using Unredacted Workload Identity Tokens

Nomad Community and Nomad Enterprise "Nomad" allocations are vulnerable to privilege escalation within a namespace through unredacted workload identity tokens. This vulnerability, identified as CVE-2024-12678, is fixed in Nomad Community Edition 1.9.4 and Nomad Enterprise 1.9.4, 1.8.8, and 1.7.16...

6.5CVSS7.1AI score0.00529EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/20 1:49 a.m.•103 views

CVE-2024-12678

Nomad CVE-2024-12678 affects Nomad Community Edition and Nomad Enterprise allocations, where privilege escalation within a namespace can occur via unredacted workload identity tokens. Affected versions: Nomad Community Edition 1.9.4 and Nomad Enterprise 1.9.4, 1.8.8, and 1.7.16. Root cause: unred...

6.5CVSS6.6AI score0.00529EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2024/12/20 1:49 a.m.•12 views

CVE-2024-12678 Nomad Allocations Vulnerable To Privilege Escalation Within A Namespace Using Unredacted Workload Identity Tokens

Nomad Community and Nomad Enterprise "Nomad" allocations are vulnerable to privilege escalation within a namespace through unredacted workload identity tokens. This vulnerability, identified as CVE-2024-12678, is fixed in Nomad Community Edition 1.9.4 and Nomad Enterprise 1.9.4, 1.8.8, and 1.7.16...

6.5CVSS6.6AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2024/12/20 1:49 a.m.•38 views

CVE-2024-12678 Nomad Allocations Vulnerable To Privilege Escalation Within A Namespace Using Unredacted Workload Identity Tokens

Nomad Community and Nomad Enterprise "Nomad" allocations are vulnerable to privilege escalation within a namespace through unredacted workload identity tokens. This vulnerability, identified as CVE-2024-12678, is fixed in Nomad Community Edition 1.9.4 and Nomad Enterprise 1.9.4, 1.8.8, and 1.7.16...

6.5CVSS0.00529EPSS
SaveExploits0References1
HashiCorp Security Advisories
HashiCorp Security Advisories
•added 2024/12/20 1:47 a.m.•29 views

Nomad Allocations Vulnerable To Privilege Escalation Within A Namespace Using Unredacted Workload Identity Token

Summary Nomad Community and Nomad Enterprise “Nomad” allocations are vulnerable to privilege escalation within a namespace through unredacted workload identity tokens. This vulnerability, identified as CVE-2024-12678, is fixed in Nomad Community Edition 1.9.4 and Nomad Enterprise 1.9.4, 1.8.8, an...

6.5CVSS6.6AI score0.00529EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/20 12:00 a.m.•3 views

CVE-2024-12678: Incorrect Privilege Assignment

Nomad Community and Nomad Enterprise "Nomad" allocations are vulnerable to privilege escalation within a namespace through unredacted workload identity tokens. This vulnerability, identified as CVE-2024-12678, is fixed in Nomad Community Edition 1.9.4 and Nomad Enterprise 1.9.4, 1.8.8, and 1.7.16...

6.5CVSS5.8AI score0.00529EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/20 12:00 a.m.•16 views

HashiCorp Nomad 安全漏洞

HashiCorp Nomad is a simple and flexible scheduler and orchestrator from the US-based HashiCorp Inc. for managing containerized and non-containerized applications at scale, both locally and in the cloud. HashiCorp Nomad suffers from a security vulnerability that stems from an elevation of privile...

6.5CVSS6.6AI score0.00529EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/12/19 12:00 a.m.•12 views

PT-2024-17712

Name of the Vulnerable Software and Affected Versions Hashicorp Nomad versions prior to 1.9.4 Hashicorp Nomad versions prior to 1.8.8 Hashicorp Nomad versions prior to 1.7.16 Description The issue is related to privilege escalation within a namespace through unredacted workload identity tokens...

6.8CVSS7AI score0.00529EPSS
SaveExploits0References43
Vulnrichment
Vulnrichment
•added 2024/12/06 3:57 p.m.•18 views

CVE-2024-30129 HCL Nomad server on Domino is affected by a host header injection vulnerability

The HTTP host header can be manipulated and cause the application to behave in unexpected ways. Any changes made to the header would cause the request to be sent to a completely different domain/IP address...

5.3CVSS6.8AI score0.00309EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/06 3:57 p.m.•50 views

CVE-2024-30129 HCL Nomad server on Domino is affected by a host header injection vulnerability

The HTTP host header can be manipulated and cause the application to behave in unexpected ways. Any changes made to the header would cause the request to be sent to a completely different domain/IP address...

5.3CVSS0.00309EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/06 12:00 a.m.•17 views

HCL Nomad 安全漏洞

HCL Nomad is an application from HCL Corporation, USA for using and managing the Domino application development platform in mobile devices. A security vulnerability exists in HCL Nomad that stems from the HTTP host header that can be manipulated...

5.3CVSS6.8AI score0.00309EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2024/11/10 4:04 a.m.•12 views

SUSE CVE-2024-10975

Nomad Community and Nomad Enterprise "Nomad" volume specification is vulnerable to arbitrary cross-namespace volume creation through unauthorized Container Storage Interface CSI volume writes. This vulnerability, identified as CVE-2024-10975, is fixed in Nomad Community Edition 1.9.2 and Nomad...

7.7CVSS7.1AI score0.0045EPSS
SaveExploits0References4
Rows per page
Query Builder