Описание
HashiCorp Nomad vulnerable to Insufficient Session Expiration
HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.4.1 event stream subscribers using a token with TTL receive updates until token garbage is collected. Fixed in 1.4.2.
Пакеты
Наименование
github.com/hashicorp/nomad
go
Затронутые версииВерсия исправления
>= 1.4.0, < 1.4.2
1.4.2
Связанные уязвимости
CVSS3: 2.7
ubuntu
около 3 лет назад
HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.4.1 event stream subscribers using a token with TTL receive updates until token garbage is collected. Fixed in 1.4.2.
CVSS3: 2.7
nvd
около 3 лет назад
HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.4.1 event stream subscribers using a token with TTL receive updates until token garbage is collected. Fixed in 1.4.2.
CVSS3: 2.7
debian
около 3 лет назад
HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.4.1 event stream su ...