NO
Product
Nomad
41
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 16Medium 18Low 2
Watch
Add Nomad to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-1782 | 9.8 | Apr 5 | HashiCorp Nomad and Nomad Enterprise versions 1.5.0 up to 1.5.2 allow unauthenticated users to bypass intended ACL authorizations for clusters where mTLS is not enabled Affected: 1.5.0 through 1.5.2; 1.5.0 through 1.5.2 |
| CVE-2022-30324 | 9.8 | Jun 2 | HashiCorp Nomad and Nomad Enterprise version 0.2.0 up to 1.3.0 were impacted by go-getter vulnerabilities enabling privilege escalation through the artifact stanza in submitted… Affected: 0.2.0 before 1.1.14; 0.2.0 before 1.1.14; 1.2.0 before 1.2.8; 1.2.0 before 1.2.8; 1.3.0; 1.3.0 |
| CVE-2020-7956 | 9.8 | Jan 31 | HashiCorp Nomad and Nomad Enterprise up to 0.10.2 incorrectly validated role/region associated with TLS certificates used for mTLS RPC, and were susceptible to privilege… Affected: before 0.10.3; before 0.10.3 |
| CVE-2019-12618 | 9.8 | Aug 12 | HashiCorp Nomad 0.9.0 through 0.9.1 has Incorrect Access Control via the exec driver Affected: 0.9.0 through 0.9.1 |
| CVE-2020-27195 | 9.1 | Oct 22 | HashiCorp Nomad and Nomad Enterprise version 0.9.0 up to 0.12.5 client file sandbox feature can be subverted using either the template or artifact stanzas Affected: 0.9.0 through 0.10.5; 0.9.0 through 0.10.5; 0.11.0 through 0.11.4; 0.11.0 through 0.11.4; 0.12.0 through 0.12.5; 0.12.0 through 0.12.5 |
Showing 5