Skip to content
OpenAdvisories

Product · HashiCorp

Nomad

24 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2023-1782

    Nomad Unauthenticated Client Agent HTTP Request Privilege Escalation

    HashiCorp Nomad and Nomad Enterprise versions 1.5.0 up to 1.5.2 allow unauthenticated users to bypass intended ACL authorizations for clusters where mTLS is not enabled. This issue is fixed in version 1.5.3.

    HashiCorp Nomad Enterprise Nomad nomad Ubuntu Alpine Go