← CVE Intelligence

CVE-2023-1782

Nomad Unauthenticated Client Agent HTTP Request Privilege Escalation PUBLISHED

Description (CNA)

HashiCorp Nomad and Nomad Enterprise versions 1.5.0 up to 1.5.2 allow unauthenticated users to bypass intended ACL authorizations for clusters where mTLS is not enabled. This issue is fixed in version 1.5.3.

Affected (CNA)

Vendor / productVersions
HashiCorp / Nomadaffected 1.5.0 before 1.5.3
HashiCorp / Nomad Enterpriseaffected 1.5.0 before 1.5.3

CWE

CWE-862

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.