Nomad Raft RPC Privilege Escalation

Summary A vulnerability was identified in Nomad and Nomad Enterprise “Nomad” such that client agents can escalate privileges by directly communicating with the server agent’s Raft RPC layer. This vulnerability, CVE-2021-37218, was fixed in Nomad 1.0.10 and 1.1.4. Background Nomad uses mTLS for...