AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

NomadGHSA-f8r8-h93m-mj77

HashiCorp Nomad vulnerable to unauthenticated client agent HTTP request privilege escalation

Nomad

CVE-2023-1782 · Published Apr 5, 2023 · updated Aug 20, 2024

High8.8
Fix: upgrade to 1.5.3 or later
GitHub advisory

HashiCorp Nomad and Nomad Enterprise versions 1.5.0 up to 1.5.2 allow unauthenticated users to bypass intended ACL authorizations for clusters where mTLS is not enabled. This issue is fixed in version 1.5.3.

Affected versions

PackageAffectedFixed in
github.com/hashicorp/nomad
Go
>= 1.5.0, < 1.5.31.5.3
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity from
GitHub (reviewed advisory)
Weakness
CWE-285, CWE-862
Also known as
CVE-2023-1782, GO-2023-1707

More Nomad advisories

All Nomad
Medium 5.3Jul 20, 2023Nomad Search API Leaks Information About CSI PluginsCVE-2023-3300fixed in 1.4.11 +1Medium 4.1Jul 20, 2023Nomad ACL Policies without Label are Applied to Unexpected ResourcesCVE-2023-3072fixed in 1.4.11 +1Low 3.4Jul 20, 2023Nomad Caller ACL Token’s Secret ID is Exposed to SentinelCVE-2023-3299fixed in 1.4.11 +1Medium 5.3Jul 6, 2023Hashicorp Nomad ACLs Cannot Deny Access to Workload’s Own VariablesCVE-2023-1296fixed in 1.4.6 +1High 8.8Mar 14, 2023Nomad Job Submitter Privilege Escalation Using Workload IdentityCVE-2023-1299fixed in 1.5.1Medium 6.5Feb 17, 2023Uncontrolled Resource Consumption in Hashicorp NomadCVE-2023-0821fixed in 1.2.16 +2