Lucene search
Veracode Vulnerability DatabaseVERACODE:39779HistoryMar 15, 2023 - 3:29 a.m.
Information Disclosure
2023-03-1503:29:07
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
github
nomad
acl
vulnerability
exposed
sensitive information
authenticated
remote attackers
bypassed
workload
EPSS
0.001
Percentile
25.7%
github.com/hashicorp/nomad is vulnerable to Information Disclosure. The vulnerability is due to the ACL system failing to block access to sensitive information from remote authenticated attackers because the deny ACL capability could be bypassed exposing the workload’s own variables.
Related
ubuntucve
ubuntucve
CVE-2023-1296
2023-03-14 00:00:00
prion
prion
Design/Logic Flaw
2023-03-14 15:15:00
github
github
Hashicorp Nomad ACLs Cannot Deny Access to Workload’s Own Variables
2023-07-06 19:24:11
alpinelinux
alpinelinux
CVE-2023-1296
2023-03-14 15:15:11
osv
osv
CVE-2023-1296
2023-03-14 15:15:11
Hashicorp Nomad ACLs Cannot Deny Access to Workload’s Own Variables
2023-07-06 19:24:11
cvelist
cvelist
CVE-2023-1296 Nomad ACLs Can Not Deny Access to Workload's Own Variables
2023-03-14 14:45:24
cve
cve
CVE-2023-1296
2023-03-14 15:15:11
nvd
nvd
CVE-2023-1296
2023-03-14 15:15:11
debiancve
debiancve
CVE-2023-1296
2023-03-14 15:15:00