Описание
Nomad Community and Nomad Enterprise (“Nomad”) prefix-based ACL policy lookup can lead to incorrect rule application and shadowing. This vulnerability, identified as CVE-2025-4922, is fixed in Nomad Community Edition 1.10.2 and Nomad Enterprise 1.10.2, 1.9.10, and 1.8.14.
Уязвимые конфигурации
Одно из
EPSS
8.1 High
CVSS3
Дефекты
Связанные уязвимости
Nomad Community and Nomad Enterprise (“Nomad”) prefix-based ACL policy lookup can lead to incorrect rule application and shadowing. This vulnerability, identified as CVE-2025-4922, is fixed in Nomad Community Edition 1.10.2 and Nomad Enterprise 1.10.2, 1.9.10, and 1.8.14.
Nomad Community and Nomad Enterprise (\u201cNomad\u201d) prefix-based ...
Hashicorp Nomad Incorrect Privilege Assignment vulnerability
Уязвимость механизма поиска ACL-политик на основе префиксов оркестратора приложений Nomad, позволяющая нарушителю обойти существующие механизмы безопасности
EPSS
8.1 High
CVSS3