GHSA-35qp-xq9f-2rjxHighCVSS 7.5

Improper Privilege Management in HashiCorp Nomad

Published
June 24, 2021
Last Modified
January 9, 2023

🔗 CVE IDs covered (1)

CVE-2021-3283 →

📋 Description

HashiCorp Nomad and Nomad Enterprise up to 0.12.9 exec and java task drivers can access processes associated with other tasks on the same node. Fixed in 0.12.10, and 1.0.3.

🎯 Affected products2

  • go/github.com/hashicorp/nomad:>= 1.0.0, < 1.0.3
  • go/github.com/hashicorp/nomad:< 0.12.10

🔗 References (3)