Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hr68-hvgv-xxqf

Опубликовано: 20 дек. 2024
Источник: github
Github: Прошло ревью
CVSS3: 6.5

Описание

Hashicorp Nomad Incorrect Privilege Assignment vulnerability

Nomad Community and Nomad Enterprise ("Nomad") allocations are vulnerable to privilege escalation within a namespace through unredacted workload identity tokens. This vulnerability, identified as CVE-2024-12678, is fixed in Nomad Community Edition 1.9.4 and Nomad Enterprise 1.9.4, 1.8.8, and 1.7.16.

Пакеты

Наименование

github.com/hashicorp/nomad

go
Затронутые версииВерсия исправления

< 1.9.4

1.9.4

EPSS

Процентиль: 21%
0.00065
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-266

Связанные уязвимости

CVSS3: 6.5
ubuntu
6 месяцев назад

Nomad Community and Nomad Enterprise ("Nomad") allocations are vulnerable to privilege escalation within a namespace through unredacted workload identity tokens. This vulnerability, identified as CVE-2024-12678, is fixed in Nomad Community Edition 1.9.4 and Nomad Enterprise 1.9.4, 1.8.8, and 1.7.16.

CVSS3: 6.5
redhat
6 месяцев назад

Nomad Community and Nomad Enterprise ("Nomad") allocations are vulnerable to privilege escalation within a namespace through unredacted workload identity tokens. This vulnerability, identified as CVE-2024-12678, is fixed in Nomad Community Edition 1.9.4 and Nomad Enterprise 1.9.4, 1.8.8, and 1.7.16.

CVSS3: 6.5
nvd
6 месяцев назад

Nomad Community and Nomad Enterprise ("Nomad") allocations are vulnerable to privilege escalation within a namespace through unredacted workload identity tokens. This vulnerability, identified as CVE-2024-12678, is fixed in Nomad Community Edition 1.9.4 and Nomad Enterprise 1.9.4, 1.8.8, and 1.7.16.

CVSS3: 6.5
debian
6 месяцев назад

Nomad Community and Nomad Enterprise ("Nomad") allocations are vulnera ...

CVSS3: 6.5
redos
4 месяца назад

Уязвимость nomad

EPSS

Процентиль: 21%
0.00065
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-266