← CVE Intelligence

CVE-2024-6717

Nomad Vulnerable to Allocation Directory Path Escape Through Archive Unpacking PUBLISHED

Description (CNA)

HashiCorp Nomad and Nomad Enterprise 1.6.12 up to 1.7.9, and 1.8.1 archive unpacking during migration is vulnerable to path escaping of the allocation directory. This vulnerability, CVE-2024-6717, is fixed in Nomad 1.6.13, 1.7.10, and 1.8.2.

Affected (CNA)

Vendor / productVersions
HashiCorp / Nomadaffected 0 before 1.8.2
HashiCorp / Nomad Enterpriseaffected 0 before 1.8.2

CWE

CWE-610

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.