Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hr68-hvgv-xxqf

Опубликовано: 20 дек. 2024
Источник: github
Github: Прошло ревью
CVSS3: 6.5

Описание

Hashicorp Nomad Incorrect Privilege Assignment vulnerability

Nomad Community and Nomad Enterprise ("Nomad") allocations are vulnerable to privilege escalation within a namespace through unredacted workload identity tokens. This vulnerability, identified as CVE-2024-12678, is fixed in Nomad Community Edition 1.9.4 and Nomad Enterprise 1.9.4, 1.8.8, and 1.7.16.

Пакеты

Наименование

github.com/hashicorp/nomad

go
Затронутые версииВерсия исправления

< 1.9.4

1.9.4

EPSS

Процентиль: 35%
0.0014
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-266

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 1 года назад

Nomad Community and Nomad Enterprise ("Nomad") allocations are vulnerable to privilege escalation within a namespace through unredacted workload identity tokens. This vulnerability, identified as CVE-2024-12678, is fixed in Nomad Community Edition 1.9.4 and Nomad Enterprise 1.9.4, 1.8.8, and 1.7.16.

CVSS3: 6.5
redhat
около 1 года назад

Nomad Community and Nomad Enterprise ("Nomad") allocations are vulnerable to privilege escalation within a namespace through unredacted workload identity tokens. This vulnerability, identified as CVE-2024-12678, is fixed in Nomad Community Edition 1.9.4 and Nomad Enterprise 1.9.4, 1.8.8, and 1.7.16.

CVSS3: 6.5
nvd
около 1 года назад

Nomad Community and Nomad Enterprise ("Nomad") allocations are vulnerable to privilege escalation within a namespace through unredacted workload identity tokens. This vulnerability, identified as CVE-2024-12678, is fixed in Nomad Community Edition 1.9.4 and Nomad Enterprise 1.9.4, 1.8.8, and 1.7.16.

CVSS3: 6.5
debian
около 1 года назад

Nomad Community and Nomad Enterprise ("Nomad") allocations are vulnera ...

CVSS3: 6.5
fstec
около 1 года назад

Уязвимость оркестратора приложений Nomad, связанная с неправильным назначением привилегий, позволяющая нарушителю получить доступ к конфиденциальной информации

EPSS

Процентиль: 35%
0.0014
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-266