by Kastro
Paper/Archive/CVE-2020-27195

CVE-2020-27195

mitre — HashiCorp Nomad and Nomad Enterprise version 0.9.0 up to 0.12.5 client file sandbox feature can be subverted using either the template or…

EPSS 1%CVSS 9.1
critical.is priorityof 100
42
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 74.1.741 × 2014.8No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

HashiCorp Nomad and Nomad Enterprise version 0.9.0 up to 0.12.5 client file sandbox feature can be subverted using either the template or artifact stanzas. Fixed in 0.12.6, 0.11.5, and 0.10.6

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

References

refnomadproject.io/downloadsrefgithub.com/hashicorp/nomad/blob/master/CHANGELOG.md#0126-october-21-2020