CVE-2023-3300
Nomad Search API Leaks Information About CSI Plugins
Résumé
Nomad Search API Leaks Information About CSI Plugins
Description d'origine
La description telle que publiée par la source (souvent en anglais).
HashiCorp Nomad and Nomad Enterprise 0.11.0 up to 1.5.6 and 1.4.1 HTTP search API can reveal names of available CSI plugins to unauthenticated users or users without the plugin:read policy. Fixed in 1.6.0, 1.5.7, and 1.4.1.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- web discuss.hashicorp.com