CVE-2023-1299

Description

Nomad Job Submitter Privilege Escalation Using Workload Identity in github.com/hashicorp/nomad

Affected packages (2)

• Go/github.com/hashicorp/nomad>= 1.5.0, < 1.5.1
• Go/github.com/hashicorp/nomad>= 1.5.0, < 1.5.1

CVSS scores

References (4)

• ADVISORYhttps://github.com/advisories/GHSA-rqm8-q8j9-662f
• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2023-1299
• PATCHhttps://github.com/hashicorp/nomad
• WEBhttps://discuss.hashicorp.com/t/hcsec-2023-08-nomad-job-submitter-privilege-escalation-using-workload-identity/51389