Go/github.com/hashicorp/nomad CVE-2023-1299: unknown, EPSS 0.53%
Nomad Job Submitter Privilege Escalation Using Workload Identity in github.com/hashicorp/nomad
Action: Upgrade github.com/hashicorp/nomad to 1.5.1 or later.
go get github.com/hashicorp/nomad@v1.5.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.5.0 | 1.5.1 | - |
Fixed versions
| 1.5.1 |
Sources
- osv: GO-2023-1633
- https://github.com/advisories/GHSA-rqm8-q8j9-662f
- https://nvd.nist.gov/vuln/detail/CVE-2023-1299
- https://discuss.hashicorp.com/t/hcsec-2023-08-nomad-job-submitter-privilege-escalation-using-workload-identity/51389
CVE-2023-1299 · published · modified · JSON