NomadGHSA-c8x3-rg72-fwwg

Privilege escalation in Hashicorp Nomad

CVE-2021-37218 · Published Sep 8, 2021 · updated Aug 21, 2024

High8.8

Fix: upgrade to 1.0.10 or later (2 fixed versions below)

HashiCorp Nomad and Nomad Enterprise Raft RPC layer allows non-server agents with a valid certificate signed by the same CA to access server-only functionality, enabling privilege escalation. Fixed in 1.0.10 and 1.1.4.

Affected versions

Package	Affected	Fixed in
github.com/hashicorp/nomad Go	< 1.0.10	1.0.10
	>= 1.1.0, < 1.1.4	1.1.4

Details and references

CVSS 3.1: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity from: GitHub (reviewed advisory)
Weakness: CWE-295
Also known as: CVE-2021-37218, GO-2022-0591

More Nomad advisories

All Nomad

Medium 5.9Feb 15, 2022

HashiCorp Nomad Artifact Download Race ConditionCVE-2022-24686fixed in 1.0.18 +2 High 8.8Dec 10, 2021

Improper Authentication in HashiCorp NomadCVE-2021-43415fixed in 1.0.14 +2 High 7.5Jun 24, 2021

Improper Privilege Management in HashiCorp NomadCVE-2021-3283fixed in 0.12.10 +1 Medium 6.5Jun 24, 2021

Improper network isolation in Hashicorp NomadCVE-2021-32575fixed in 0.12.12 +1 High 9.8May 18, 2021

Improper Certificate Validation in HashiCorp NomadCVE-2020-7956fixed in 0.10.3 High 7.5May 18, 2021

Allocation of Resources Without Limits or Throttling in HashiCorp NomadCVE-2020-7218fixed in 0.10.3