Privilege Escalation

2023-03-1503:49:53

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

vulnerability

remote attacker

acl permission

management-level privileges

workload identity

task api

acl policies

0.001 Low

EPSS

Percentile

32.1%

JSON

github.com/hashicorp/nomad is vulnerable to Privilege Escalation. A remote attacker with the submit-job ACL permission is able to escalate to management-level privileges using the workload identity and task API by submitting a job without ACL policies.

CPENameOperatorVersion
github.com/hashicorp/nomadlev1.5.0
github.com/hashicorp/nomadlev1.5.0
nomadeq1.4.3-r2
nomadeq1.4.2-r1
nomadeq1.2.6-r0
nomadeq0.11.2-r1
nomadeq1.0.4-r1
nomadeq1.1.1-r0
nomadeq1.1.1-r3
nomadeq0.10.3-r1

Name	Operator	Version
github.com/hashicorp/nomad	le	v1.5.0
github.com/hashicorp/nomad	le	v1.5.0
nomad	eq	1.4.3-r2
nomad	eq	1.4.2-r1
nomad	eq	1.2.6-r0
nomad	eq	0.11.2-r1
nomad	eq	1.0.4-r1
nomad	eq	1.1.1-r0
nomad	eq	1.1.1-r3
nomad	eq	0.10.3-r1