Lucene search
+L

1134 matches found

OSV
OSV
•added 2024/07/23 3:30 a.m.•15 views

GHSA-5MQX-RPXV-MVXJ HashiCorp Nomad is vulnerable to path escape through archive unpacking during migration

HashiCorp Nomad and Nomad Enterprise 1.6.12 up to 1.7.9, and 1.8.1 archive unpacking during migration is vulnerable to path escaping of the allocation directory. This vulnerability, CVE-2024-6717, is fixed in Nomad 1.6.13, 1.7.10, and 1.8.2...

7.7CVSS5.2AI score0.00391EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2024/07/23 3:30 a.m.•17 views

HashiCorp Nomad is vulnerable to path escape through archive unpacking during migration

HashiCorp Nomad and Nomad Enterprise 1.6.12 up to 1.7.9, and 1.8.1 archive unpacking during migration is vulnerable to path escaping of the allocation directory. This vulnerability, CVE-2024-6717, is fixed in Nomad 1.6.13, 1.7.10, and 1.8.2...

8.6CVSS5.2AI score0.00391EPSS
SaveExploits0References5Affected Software1
NVD
NVD
•added 2024/07/23 1:15 a.m.•28 views

CVE-2024-6717

HashiCorp Nomad and Nomad Enterprise 1.6.12 up to 1.7.9, and 1.8.1 archive unpacking during migration is vulnerable to path escaping of the allocation directory. This vulnerability, CVE-2024-6717, is fixed in Nomad 1.6.13, 1.7.10, and 1.8.2...

8.6CVSS0.00391EPSS
SaveExploits0References1
OSV
OSV
•added 2024/07/23 1:15 a.m.•29 views

UBUNTU-CVE-2024-6717

HashiCorp Nomad and Nomad Enterprise 1.6.12 up to 1.7.9, and 1.8.1 archive unpacking during migration is vulnerable to path escaping of the allocation directory. This vulnerability, CVE-2024-6717, is fixed in Nomad 1.6.13, 1.7.10, and 1.8.2...

8.6CVSS5.7AI score0.00391EPSS
SaveExploits0References3
Mend
Mend
•added 2024/07/23 12:16 a.m.•3 views

CVE-2024-6717

HashiCorp Nomad and Nomad Enterprise 1.6.12 up to 1.7.9, and 1.8.1 archive unpacking during migration is vulnerable to path escaping of the allocation directory. This vulnerability, CVE-2024-6717, is fixed in Nomad 1.6.13, 1.7.10, and 1.8.2...

8.6CVSS0.00391EPSS
SaveExploits0References9
Cvelist
Cvelist
•added 2024/07/23 12:16 a.m.•37 views

CVE-2024-6717 Nomad Vulnerable to Allocation Directory Path Escape Through Archive Unpacking

HashiCorp Nomad and Nomad Enterprise 1.6.12 up to 1.7.9, and 1.8.1 archive unpacking during migration is vulnerable to path escaping of the allocation directory. This vulnerability, CVE-2024-6717, is fixed in Nomad 1.6.13, 1.7.10, and 1.8.2...

7.7CVSS0.00391EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/07/23 12:16 a.m.•13 views

CVE-2024-6717 Nomad Vulnerable to Allocation Directory Path Escape Through Archive Unpacking

HashiCorp Nomad and Nomad Enterprise 1.6.12 up to 1.7.9, and 1.8.1 archive unpacking during migration is vulnerable to path escaping of the allocation directory. This vulnerability, CVE-2024-6717, is fixed in Nomad 1.6.13, 1.7.10, and 1.8.2...

7.7CVSS6.7AI score0.00391EPSS
SaveExploits0References1
CVE
CVE
•added 2024/07/23 12:16 a.m.•89 views

CVE-2024-6717

HashiCorp Nomad and Nomad Enterprise versions 1.6.12 up to 1.7.9, and 1.8.1 are affected by CVE-2024-6717 due to path escaping of the allocation directory during archive unpacking in migration. The fixed releases are Nomad 1.6.13, 1.7.10, and 1.8.2. Near-term risk is a potential path traversal du...

8.6CVSS7.5AI score0.00391EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2024/07/23 12:16 a.m.•16 views

CVE-2024-6717 Nomad Vulnerable to Allocation Directory Path Escape Through Archive Unpacking

HashiCorp Nomad and Nomad Enterprise 1.6.12 up to 1.7.9, and 1.8.1 archive unpacking during migration is vulnerable to path escaping of the allocation directory. This vulnerability, CVE-2024-6717, is fixed in Nomad 1.6.13, 1.7.10, and 1.8.2...

7.7CVSS6.2AI score
SaveExploits0References4
CNNVD
CNNVD
•added 2024/07/23 12:00 a.m.•13 views

HashiCorp Nomad和HashiCorp Nomad Enterprise 安全漏洞

HashiCorp Nomad and HashiCorp Nomad Enterprise are both products of HashiCorp, Inc. of the U.S. HashiCorp Nomad is a simple and flexible scheduler and orchestrator. HashiCorp Nomad is a simple and flexible scheduler and orchestrator for managing containerized and non-containerized applications at...

7.7CVSS6.4AI score0.00391EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/23 12:00 a.m.•3 views

CVE-2024-6717: Externally Controlled Reference to a Resource in Another Sphere

HashiCorp Nomad and Nomad Enterprise 1.6.12 up to 1.7.9, and 1.8.1 archive unpacking during migration is vulnerable to path escaping of the allocation directory. This vulnerability, CVE-2024-6717, is fixed in Nomad 1.6.13, 1.7.10, and 1.8.2...

8.6CVSS6AI score0.00391EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2024/07/23 12:00 a.m.•19 views

CVE-2024-6717

HashiCorp Nomad and Nomad Enterprise 1.6.12 up to 1.7.9, and 1.8.1 archive unpacking during migration is vulnerable to path escaping of the allocation directory. This vulnerability, CVE-2024-6717, is fixed in Nomad 1.6.13, 1.7.10, and 1.8.2...

8.6CVSS5.8AI score0.00391EPSS
SaveExploits0References2
HashiCorp Security Advisories
HashiCorp Security Advisories
•added 2024/07/22 10:54 p.m.•22 views

Nomad Vulnerable to Allocation Directory Path Escape Through Archive Unpacking

Summary HashiCorp Nomad and Nomad Enterprise 1.6.12 up to 1.7.9, and 1.8.1 archive unpacking during migration is vulnerable to path escaping of the allocation directory. This vulnerability, CVE-2024-6717, is fixed in Nomad 1.6.13, 1.7.10, and 1.8.2. Background Nomad creates a working directory fo...

8.6CVSS6.4AI score0.00391EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2024/07/22 12:00 a.m.•9 views

PT-2024-37819

Name of the Vulnerable Software and Affected Versions HashiCorp Nomad and Nomad Enterprise versions 1.6.12 through 1.7.9 HashiCorp Nomad and Nomad Enterprise version 1.8.1 Description The issue concerns archive unpacking during migration, where path escaping of the allocation directory is possibl...

8.6CVSS6.7AI score0.00391EPSS
SaveExploits0
OSV
OSV
•added 2024/07/19 2:15 a.m.•10 views

CVE-2024-30130

HCL Nomad server on Domino is vulnerable to the cache containing sensitive information which could potentially give an attacker the ability to acquire the sensitive information...

7.5CVSS5.8AI score0.00288EPSS
SaveExploits0References1
NVD
NVD
•added 2024/07/19 2:15 a.m.•30 views

CVE-2024-30130

HCL Nomad server on Domino is vulnerable to the cache containing sensitive information which could potentially give an attacker the ability to acquire the sensitive information...

7.5CVSS0.00288EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/07/19 12:03 a.m.•31 views

CVE-2024-30130 HCL Nomad server on Domino is affected by a use of web browser cache containing sensitive information vulnerability

HCL Nomad server on Domino is vulnerable to the cache containing sensitive information which could potentially give an attacker the ability to acquire the sensitive information...

3.7CVSS0.00288EPSS
SaveExploits0References1
CVE
CVE
•added 2024/07/19 12:03 a.m.•64 views

CVE-2024-30130

Technical details (affected products, versions, root cause, or fixes) are not publicly provided in the supplied documents. Monitor for updates from HCL/NVD/CVE listings.

7.5CVSS3.9AI score0.00288EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/07/19 12:03 a.m.•18 views

CVE-2024-30130 HCL Nomad server on Domino is affected by a use of web browser cache containing sensitive information vulnerability

HCL Nomad server on Domino is vulnerable to the cache containing sensitive information which could potentially give an attacker the ability to acquire the sensitive information...

3.7CVSS6.4AI score0.00288EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/07/19 12:00 a.m.•14 views

PT-2024-23204

Name of the Vulnerable Software and Affected Versions HCL Nomad server on Domino affected versions not specified Description The issue concerns the cache of the HCL Nomad server on Domino, which contains sensitive information. This could potentially allow an attacker to acquire the sensitive...

7.5CVSS6.8AI score0.00288EPSS
SaveExploits0References6
Rows per page
Query Builder