CVE-2024-1329
Nomad Vulnerable to Arbitrary Write Through Symlink Attack
Résumé
Nomad Vulnerable to Arbitrary Write Through Symlink Attack
Description d'origine
La description telle que publiée par la source (souvent en anglais).
HashiCorp Nomad and Nomad Enterprise 1.5.13 up to 1.6.6, and 1.7.3 template renderer is vulnerable to arbitrary file write on the host as the Nomad client user through symlink attacks. This vulnerability, CVE-2024-1329, is fixed in Nomad 1.7.4, 1.6.7, and 1.5.14.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- web discuss.hashicorp.com