tocsin

Alpine/nomad: high 8.8

HashiCorp Nomad and Nomad Enterprise Raft RPC layer allows non-server agents with a valid certificate signed by the same CA to access server-only functionality, enabling privilege escalation. Fixed in

Action: Upgrade nomad to 1.2.6-r0 or later.

Affected

introducedfixedlast affected
1.1.11.2.6-r0-

Fixed versions

1.2.6-r0

Sources

published · modified · JSON