GHSA-c8x3-rg72-fwwg

Privilege escalation in Hashicorp Nomad

Source: GitHub Advisory Database (reviewed) High CVE-2021-37218

Packages

Ecosystem	Package	Affected	Fixed in
Go	github.com/hashicorp/nomad	< 1.0.10	1.0.10
Go	github.com/hashicorp/nomad	>= 1.1.0, < 1.1.4	1.1.4

Details

As written in the advisory (Markdown source, shown as plain text).

HashiCorp Nomad and Nomad Enterprise Raft RPC layer allows non-server agents with a valid certificate signed by the same CA to access server-only functionality, enabling privilege escalation. Fixed in 1.0.10 and 1.1.4.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2021-37218 advisory
https://discuss.hashicorp.com/t/hcsec-2021-21-nomad-raft-rpc-privilege-escalation/29023 web
https://github.com/hashicorp/nomad package
https://www.hashicorp.com/blog/category/nomad web