Headline
GHSA-526x-rm7j-v389: Privilege escalation in Hashicorp Nomad
HashiCorp Nomad and Nomad Enterprise version 0.2.0 up to 1.3.0 were impacted by go-getter vulnerabilities enabling privilege escalation through the artifact stanza in submitted jobs onto the client agent host. Fixed in 1.1.14, 1.2.8, and 1.3.1.
Package
gomod github.com/hashicorp/nomad (Go )
Affected versions
>= 0.2.0, < 1.1.14
>= 1.2.0, < 1.2.8
>= 1.3.0, < 1.3.1
Patched versions
1.1.14
1.2.8
1.3.1
Related news
CVE-2022-30324
HashiCorp Nomad and Nomad Enterprise version 0.2.0 up to 1.3.0 were impacted by go-getter vulnerabilities enabling privilege escalation through the artifact stanza in submitted jobs onto the client agent host. Fixed in 1.1.14, 1.2.8, and 1.3.1.