← CVE Intelligence

CVE-2023-1299

Nomad Job Submitter Privilege Escalation Using Workload Identity PUBLISHED

Description (CNA)

HashiCorp Nomad and Nomad Enterprise 1.5.0 allow a job submitter to escalate to management-level privileges using workload identity and task API. Fixed in 1.5.1.

Affected (CNA)

Vendor / productVersions
HashiCorp / Nomadaffected 1.5.0
HashiCorp / Nomad Enterpriseaffected 1.5.0

CWE

CWE-862

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.