~ / search / GHSA-2w2v-xcr9-mj4m

GHSA-2w2v-xcr9-mj4m

Hashicorp Nomad Access Control Issues

Source: GitHub Advisory Database (reviewed) Critical CVE-2019-12618

Packages

EcosystemPackageAffectedFixed in
Go github.com/hashicorp/nomad >= 0.9.0, < 0.9.2 0.9.2

Details

As written in the advisory (Markdown source, shown as plain text).

HashiCorp Nomad 0.9.0 through 0.9.1 has Incorrect Access Control via the exec driver.

References

External links from the advisory. They lead to third-party sites.