Skip to content
OpenAdvisories

Package · Go

github.com/hashicorp/nomad

34 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 10.0
    CVE-2023-1782

    Nomad Unauthenticated Client Agent HTTP Request Privilege Escalation

    HashiCorp Nomad and Nomad Enterprise versions 1.5.0 up to 1.5.2 allow unauthenticated users to bypass intended ACL authorizations for clusters where mTLS is not enabled. This issue is fixed in version 1.5.3.

    HashiCorp Nomad Enterprise Nomad nomad Ubuntu Alpine Go
  • Critical 9.8
    CVE-2022-30324

    Privilege escalation in Hashicorp Nomad

    HashiCorp Nomad and Nomad Enterprise version 0.2.0 up to 1.3.0 were impacted by go-getter vulnerabilities enabling privilege escalation through the artifact stanza in submitted jobs onto the client agent host. Fixed in 1.1.14, 1.2.8, and 1.3.1.

    nomad github.com/hashicorp/nomad nomad Ubuntu Alpine Go
  • Critical 9.1
    CVE-2020-27195

    Use After Free in HashiCorp Nomad

    HashiCorp Nomad and Nomad Enterprise version 0.9.0 up to 0.12.5 client file sandbox feature can be subverted using either the template or artifact stanzas. Fixed in 0.12.6, 0.11.5, and 0.10.6

    nomad github.com/hashicorp/nomad nomad Ubuntu Alpine Go
  • Critical 9.8
    CVE-2020-7956

    Improper Certificate Validation in HashiCorp Nomad

    HashiCorp Nomad and Nomad Enterprise up to 0.10.2 incorrectly validated role/region associated with TLS certificates used for mTLS RPC, and were susceptible to privilege escalation. Fixed in 0.10.3.

    nomad github.com/hashicorp/nomad Ubuntu Go
  • Critical 9.8
    CVE-2019-12618

    Hashicorp Nomad Access Control Issues

    HashiCorp Nomad 0.9.0 through 0.9.1 has Incorrect Access Control via the exec driver.

    nomad github.com/hashicorp/nomad nomad Ubuntu Alpine Go