CVE-2023-3299
Nomad Caller ACL Token's Secret ID is Exposed to Sentinel
Résumé
Nomad Caller ACL Token's Secret ID is Exposed to Sentinel
Description d'origine
La description telle que publiée par la source (souvent en anglais).
HashiCorp Nomad Enterprise 1.2.11 up to 1.5.6, and 1.4.10 ACL policies using a block without a label generates unexpected results. Fixed in 1.6.0, 1.5.7, and 1.4.11.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory nvd.nist.gov
- web discuss.hashicorp.com