CVE-2023-1782

Description

HashiCorp Nomad vulnerable to unauthenticated client agent HTTP request privilege escalation in github.com/hashicorp/nomad

Affected packages (2)

• Go/github.com/hashicorp/nomad>= 1.5.0, < 1.5.3
• Go/github.com/hashicorp/nomad>= 1.5.0, < 1.5.3

CVSS scores

References (4)

• ADVISORYhttps://github.com/advisories/GHSA-f8r8-h93m-mj77
• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2023-1782
• PATCHhttps://github.com/hashicorp/nomad
• WEBhttps://discuss.hashicorp.com/t/hcsec-2023-12-nomad-unauthenticated-client-agent-http-request-privilege-escalation/52375