by Kastro
Paper/Archive/CVE-2023-1782

CVE-2023-1782

HashiCorp Nomad — Nomad Unauthenticated Client Agent HTTP Request Privilege Escalation

EPSS 0.8%CVSS 10.0
critical.is priorityof 100
41
CVSS 10.0 (CNA)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 55.5.555 × 2011.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

HashiCorp Nomad and Nomad Enterprise versions 1.5.0 up to 1.5.2 allow unauthenticated users to bypass intended ACL authorizations for clusters where mTLS is not enabled. This issue is fixed in version 1.5.3.

Affected

ProductAffectedFixed inSource
Nomad1.5.0 – < 1.5.31.5.3CNA
Nomad Enterprise1.5.0 – < 1.5.31.5.3CNA

Scores by source

HashiCorp (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refdiscuss.hashicorp.com/t/hcsec-2023-12-nomad-unauthenticated-client-agent-http-request-privilege-escalation/52375