github.com/hashicorp/nomad vulnerabilities (Go)
34 vulnerabilities.
-
github.com/hashicorp/nomadGo Nomad vulnerable to path traversal in dynamic host volume which may lead to code execution 8.8 High -
github.com/hashicorp/nomadGo Nomad vulnerable to arbitrary file read/write on client host through symlink attack 6.0 Medium -
github.com/hashicorp/nomadGo Nomad Vulnerable To Incorrect ACL Policy Lookup Attached To A Job 8.1 High -
github.com/hashicorp/nomadGo Nomad Exposes Sensitive Workload Identity and Client Secret Token in Audit Logs 6.5 Medium -
github.com/hashicorp/nomadGo Nomad Allocations Vulnerable To Privilege Escalation Within A Namespace Using Unredacted Workload Identity Tokens 6.5 Medium -
github.com/hashicorp/nomadGo Nomad Vulnerable To Cross-Namespace Volume Creation Abusing CSI Write Permission 7.7 High -
github.com/hashicorp/nomadGo Nomad Vulnerable to Allocation Directory Escape On Non-Existing File Paths Through Archive Unpacking 5.8 Medium -
github.com/hashicorp/nomadGo Nomad Vulnerable to Allocation Directory Path Escape Through Archive Unpacking 7.7 High -
github.com/hashicorp/nomadGo Nomad Vulnerable to Arbitrary Write Through Symlink Attack 7.7 High -
github.com/hashicorp/nomadGo Nomad Search API Leaks Information About CSI Plugins 5.3 Medium -
github.com/hashicorp/nomadGo Nomad Caller ACL Token's Secret ID is Exposed to Sentinel 3.4 Low -
github.com/hashicorp/nomadGo Nomad ACL Policies without Label are Applied to Unexpected Resources 4.1 Medium -
github.com/hashicorp/nomadGo Nomad Unauthenticated Client Agent HTTP Request Privilege Escalation 10.0 Critical -
github.com/hashicorp/nomadGo Nomad Job Submitter Privilege Escalation Using Workload Identity 7.4 High -
github.com/hashicorp/nomadGo Nomad ACLs Can Not Deny Access to Workload's Own Variables 2.7 Low -
github.com/hashicorp/nomadGo Nomad Client Vulnerable to Decompression Bombs in Artifact Block 6.5 Medium -
github.com/hashicorp/nomadGo Nomad Event Stream Subscriber Using a Token with TTL Receives Updates Until Garbage Collected 2.7 Low -
github.com/hashicorp/nomadGo Nomad Workload Identity Token Can List Non-sensitive Metadata for Paths Under nomad/ 5.0 Medium -
github.com/hashicorp/nomadGo Nomad Panics On Job Submission With Bad Artifact Stanza Source URL 6.5 Medium -
github.com/hashicorp/nomadGo Privilege escalation in Hashicorp Nomad 9.8 Critical -
github.com/hashicorp/nomadGo HashiCorp Nomad vulnerable to Allocation of Resources Without Limits or Throttling 7.5 High -
github.com/hashicorp/nomadGo Arbitrary file reads in HashiCorp Nomad 7.5 High -
github.com/hashicorp/nomadGo Nomad Spread Job Stanza May Trigger Panic in Servers 6.5 Medium -
github.com/hashicorp/nomadGo Hashicorp Nomad Information Exposure Through Environmental Variables 5.3 Medium -
github.com/hashicorp/nomadGo HashiCorp Nomad Artifact Download Race Condition 5.9 Medium -
github.com/hashicorp/nomadGo Improper Authentication in HashiCorp Nomad 8.8 High -
github.com/hashicorp/nomadGo Privilege escalation in Hashicorp Nomad 8.8 High -
github.com/hashicorp/nomadGo Improper network isolation in Hashicorp Nomad 6.5 Medium -
github.com/hashicorp/nomadGo Improper Privilege Management in HashiCorp Nomad 7.5 High -
github.com/hashicorp/nomadGo Path Traversal in HashiCorp Nomad 6.5 Medium -
github.com/hashicorp/nomadGo Use After Free in HashiCorp Nomad 9.1 Critical -
github.com/hashicorp/nomadGo Improper Certificate Validation in HashiCorp Nomad 9.8 Critical -
github.com/hashicorp/nomadGo Allocation of Resources Without Limits or Throttling in HashiCorp Nomad 7.5 High -
github.com/hashicorp/nomadGo Hashicorp Nomad Access Control Issues 9.8 Critical