nomad vulnerabilities (Ubuntu)
42 vulnerabilities.
-
nomadUbuntu Nomad allocation data migration may allow host directory permission modification via symlink following 8.8 High -
nomadUbuntu Nomad dispatch payload writes can escape the allocation directory through symlinks 8.4 High -
nomadUbuntu Nomad vulnerable to cross-namespace host volume claim deletion 4.2 Medium -
nomadUbuntu Nomad vulnerable to sandbox escape in Docker task driver 8.7 High -
nomadUbuntu Nomad Docker driver Linux host namespace bypass 7.7 High -
nomadUbuntu Nomad vulnerable to path traversal in dynamic host volume which may lead to code execution 8.8 High -
nomadUbuntu Nomad's exec2 task driver vulnerable to arbitrary file read/write on client host through symlink attack 6.0 Medium -
nomadUbuntu Nomad vulnerable to arbitrary file read/write on client host through symlink attack 6.0 Medium -
nomadUbuntu Nomad Vulnerable To Incorrect ACL Policy Lookup Attached To A Job 8.1 High -
nomadUbuntu Nomad Exposes Sensitive Workload Identity and Client Secret Token in Audit Logs 6.5 Medium -
nomadUbuntu Nomad Vulnerable To Event Stream Namespace ACL Policy Bypass Through Wildcard Namespace 7.1 High -
nomadUbuntu Nomad Allocations Vulnerable To Privilege Escalation Within A Namespace Using Unredacted Workload Identity Tokens 6.5 Medium -
nomadUbuntu Nomad Vulnerable To Cross-Namespace Volume Creation Abusing CSI Write Permission 7.7 High -
nomadUbuntu Nomad Vulnerable to Allocation Directory Escape On Non-Existing File Paths Through Archive Unpacking 5.8 Medium -
nomadUbuntu Nomad Vulnerable to Allocation Directory Path Escape Through Archive Unpacking 7.7 High -
nomadUbuntu Nomad Vulnerable to Arbitrary Write Through Symlink Attack 7.7 High -
nomadUbuntu Nomad Search API Leaks Information About CSI Plugins 5.3 Medium -
nomadUbuntu Nomad Caller ACL Token's Secret ID is Exposed to Sentinel 3.4 Low -
nomadUbuntu Nomad ACL Policies without Label are Applied to Unexpected Resources 4.1 Medium -
nomadUbuntu Nomad Unauthenticated Client Agent HTTP Request Privilege Escalation 10.0 Critical -
nomadUbuntu Nomad Job Submitter Privilege Escalation Using Workload Identity 7.4 High -
nomadUbuntu Nomad ACLs Can Not Deny Access to Workload's Own Variables 2.7 Low -
nomadUbuntu Nomad Client Vulnerable to Decompression Bombs in Artifact Block 6.5 Medium -
nomadUbuntu Nomad Event Stream Subscriber Using a Token with TTL Receives Updates Until Garbage Collected 2.7 Low -
nomadUbuntu Nomad Workload Identity Token Can List Non-sensitive Metadata for Paths Under nomad/ 5.0 Medium -
nomadUbuntu Nomad Panics On Job Submission With Bad Artifact Stanza Source URL 6.5 Medium -
nomadUbuntu Privilege escalation in Hashicorp Nomad 9.8 Critical -
nomadUbuntu HashiCorp Nomad vulnerable to Allocation of Resources Without Limits or Throttling 7.5 High -
nomadUbuntu Arbitrary file reads in HashiCorp Nomad 7.5 High -
nomadUbuntu Nomad Spread Job Stanza May Trigger Panic in Servers 6.5 Medium -
nomadUbuntu Hashicorp Nomad Information Exposure Through Environmental Variables 5.3 Medium -
nomadUbuntu HashiCorp Nomad Artifact Download Race Condition 5.9 Medium -
nomadUbuntu Improper Authentication in HashiCorp Nomad 8.8 High -
nomadUbuntu HashiCorp Nomad and Nomad Enterprise 1.1.1 through 1.1.5 allowed authenticated users with job... 6.5 Medium -
nomadUbuntu Privilege escalation in Hashicorp Nomad 8.8 High -
nomadUbuntu Improper network isolation in Hashicorp Nomad 6.5 Medium -
nomadUbuntu Improper Privilege Management in HashiCorp Nomad 7.5 High -
nomadUbuntu Use After Free in HashiCorp Nomad 9.1 Critical -
nomadUbuntu HashiCorp Nomad and Nomad Enterprise up to 0.10.4 contained a cross-site scripting vulnerability such that files from a malicious workload could cause arbitrary JavaScript to execute in the web UI. Fi… 5.4 Medium -
nomadUbuntu Improper Certificate Validation in HashiCorp Nomad 9.8 Critical -
nomadUbuntu Allocation of Resources Without Limits or Throttling in HashiCorp Nomad 7.5 High -
nomadUbuntu Hashicorp Nomad Access Control Issues 9.8 Critical