critical9.8
CVE-2022-30324
Privilege escalation in Hashicorp Nomad
Impact
HashiCorp Nomad and Nomad Enterprise version 0.2.0 up to 1.3.0 were impacted by go-getter vulnerabilities enabling privilege escalation through the artifact stanza in submitted jobs onto the client agent host. Fixed in 1.1.14, 1.2.8, and 1.3.1.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| go | github.com/hashicorp/nomad | >= 0.2.0, < 1.1.14 | 1.1.14 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hashicorp | Nomad | from 0.2.0 before 1.1.14 from 1.2.0 before 1.2.8 Version 1.3.0 |