Описание
HashiCorp Nomad and Nomad Enterprise versions 1.5.0 up to 1.5.2 allow unauthenticated users to bypass intended ACL authorizations for clusters where mTLS is not enabled. This issue is fixed in version 1.5.3.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needs-triage |
| devel | DNE | |
| esm-apps/bionic | needs-triage | |
| esm-apps/focal | needs-triage | |
| focal | ignored | end of standard support, was needs-triage |
| jammy | DNE | |
| kinetic | DNE | |
| lunar | DNE | |
| mantic | DNE | |
| noble | DNE |
Показывать по
10
Ссылки на источники
EPSS
Процентиль: 60%
0.00403
Низкий
9.9 Critical
CVSS3
Связанные уязвимости
CVSS3: 9.9
nvd
почти 3 года назад
HashiCorp Nomad and Nomad Enterprise versions 1.5.0 up to 1.5.2 allow unauthenticated users to bypass intended ACL authorizations for clusters where mTLS is not enabled. This issue is fixed in version 1.5.3.
CVSS3: 9.9
debian
почти 3 года назад
HashiCorp Nomad and Nomad Enterprise versions 1.5.0 up to 1.5.2 allow ...
CVSS3: 8.8
github
почти 3 года назад
HashiCorp Nomad vulnerable to unauthenticated client agent HTTP request privilege escalation
EPSS
Процентиль: 60%
0.00403
Низкий
9.9 Critical
CVSS3