Lucene search
Veracode Vulnerability DatabaseVERACODE:22427HistoryFeb 03, 2020 - 4:13 a.m.
Privilege Escalation
2020-02-0304:13:32
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.002 Low
EPSS
Percentile
53.4%
github.com/hashicorp/nomad is vulnerable to privilege escalation. The role and region associated with TLS certificates that are used for the mTLS RPC are not properly validated, allowing an attacker to obtain unauthorized access with a malicious TLS certificate.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/hashicorp/nomad | le | 0.10.2-rc1 |
Related
debiancve
debiancve
CVE-2020-7956
2020-01-31 13:15:00
ubuntucve
ubuntucve
CVE-2020-7956
2020-01-31 00:00:00
prion
prion
Privilege escalation
2020-01-31 13:15:00
osv
osv
CVE-2020-7956
2020-01-31 13:15:10
Improper Certificate Validation in HashiCorp Nomad
2021-05-18 18:20:26
cvelist
cvelist
CVE-2020-7956
2020-01-31 12:43:52
nvd
nvd
CVE-2020-7956
2020-01-31 13:15:10
github
github
Improper Certificate Validation in HashiCorp Nomad
2021-05-18 18:20:26
cve
cve
CVE-2020-7956
2020-01-31 13:15:10