Insecure Access Controls

2021-02-0521:25:25

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.002 Low

EPSS

Percentile

54.0%

JSON

HashiCorp Nomad and Nomad Enterprise uses insecure access controls. Exec and Java task drivers are able to access processes associated with other tasks on the same node.

CPENameOperatorVersion
nomad:sideq0.10.5+dfsg1-3
nomad:bullseyeeq0.10.5+dfsg1-3
nomad:3.13eq0.12.7-r0
nomadeq0.10.3-r0
nomadeq0.10.3-r1
nomadeq0.12.7-r0
nomadeq0.11.2-r1
nomad:sideq0.10.5+dfsg1-3
nomad:bullseyeeq0.10.5+dfsg1-3
nomad:3.13eq0.12.7-r0

Name	Operator	Version
nomad:sid	eq	0.10.5+dfsg1-3
nomad:bullseye	eq	0.10.5+dfsg1-3
nomad:3.13	eq	0.12.7-r0
nomad	eq	0.10.3-r0
nomad	eq	0.10.3-r1
nomad	eq	0.12.7-r0
nomad	eq	0.11.2-r1
nomad:sid	eq	0.10.5+dfsg1-3
nomad:bullseye	eq	0.10.5+dfsg1-3
nomad:3.13	eq	0.12.7-r0