CVE-2023-1296
Nomad ACLs Can Not Deny Access to Workload's Own Variables
Summary
Nomad ACLs Can Not Deny Access to Workload's Own Variables
Original description
The description as published by the source.
HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.5.0 did not correctly enforce deny policies applied to a workload’s variables. Fixed in 1.4.6 and 1.5.1.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- web discuss.hashicorp.com