CVE-2023-3299
Nomad Caller ACL Token's Secret ID is Exposed to Sentinel
Summary
Nomad Caller ACL Token's Secret ID is Exposed to Sentinel
Original description
The description as published by the source.
HashiCorp Nomad Enterprise 1.2.11 up to 1.5.6, and 1.4.10 ACL policies using a block without a label generates unexpected results. Fixed in 1.6.0, 1.5.7, and 1.4.11.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory nvd.nist.gov
- web discuss.hashicorp.com