GHSA-rpvr-38xv-xvxqMediumCVSS 4.1

Nomad ACL Policies without Label are Applied to Unexpected Resources

Published
July 20, 2023
Last Modified
September 26, 2024

🔗 CVE IDs covered (1)

CVE-2023-3072 →

📋 Description

A vulnerability was identified in Nomad, an ACL policy using a block without label may be applied to unexpected resources. This vulnerability, CVE-2023-3072, affects Nomad from 0.7 up to 1.5.6 and 1.4.10 and was fixed in 1.6.0, 1.5.7, and 1.4.11.

🎯 Affected products2

  • go/github.com/hashicorp/nomad:>= 0.7.0, < 1.4.11
  • go/github.com/hashicorp/nomad:>= 1.5.0, < 1.5.6

🔗 References (4)