CVE-2023-1299
Nomad Job Submitter Privilege Escalation Using Workload Identity
Résumé
Nomad Job Submitter Privilege Escalation Using Workload Identity
Description d'origine
La description telle que publiée par la source (souvent en anglais).
HashiCorp Nomad and Nomad Enterprise 1.5.0 allow a job submitter to escalate to management-level privileges using workload identity and task API. Fixed in 1.5.1.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- web discuss.hashicorp.com