CVE-2023-1299
Nomad Job Submitter Privilege Escalation Using Workload Identity
Summary
Nomad Job Submitter Privilege Escalation Using Workload Identity
Original description
The description as published by the source.
HashiCorp Nomad and Nomad Enterprise 1.5.0 allow a job submitter to escalate to management-level privileges using workload identity and task API. Fixed in 1.5.1.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- web discuss.hashicorp.com