CVE-2023-3072
Nomad ACL Policies without Label are Applied to Unexpected Resources
Summary
Nomad ACL Policies without Label are Applied to Unexpected Resources
Original description
The description as published by the source.
HashiCorp Nomad and Nomad Enterprise 0.7.0 up to 1.5.6 and 1.4.10 ACL policies using a block without a label generates unexpected results. Fixed in 1.6.0, 1.5.7, and 1.4.11.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- web discuss.hashicorp.com