Bypass Restriction

2022-03-2105:39:10

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

42.9%

JSON

HashiCorp Nomad and Nomad Enterprise with the QEMU task driver enabled is vulnerable to bypass restriction. It allows authenticated users with job submission capabilities to bypass the configured allowed image paths.

CPENameOperatorVersion
nomadeq1.1.1-r1
nomadeq1.1.1-r0
nomadeq1.1.1-r2
nomadeq0.10.3-r1
nomadeq1.0.4-r1
nomadeq1.0.4-r0
nomadeq0.12.7-r0
nomadeq0.10.3-r0
nomadeq0.11.2-r1
nomadeq1.1.1-r3

Name	Operator	Version
nomad	eq	1.1.1-r1
nomad	eq	1.1.1-r0
nomad	eq	1.1.1-r2
nomad	eq	0.10.3-r1
nomad	eq	1.0.4-r1
nomad	eq	1.0.4-r0
nomad	eq	0.12.7-r0
nomad	eq	0.10.3-r0
nomad	eq	0.11.2-r1
nomad	eq	1.1.1-r3