HashiCorp Nomad Artifact Download Race Condition
HashiCorp Nomad and Nomad Enterprise 0.3.0 through 1.0.17, 1.1.11, and 1.2.5 artifact download functionality has a race condition such that the Nomad client agent could download the wrong artifact into the wrong destination. This issue is fixed in 1.0.18, 1.1.12, and 1.2.6.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-24686US | medium5.9 | — | ||
HashiCorp Nomad and Nomad Enterprise 0.3.0 through 1.0.17, 1.1.11, and 1.2.5 artifact download functionality has a race condition such that the Nomad client agent could download th… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://discuss.hashicorp.comWEB
- https://discuss.hashicorp.com/t/hcsec-2022-01-nomad-artifact-download-race-condition/35559WEB
- https://github.com/hashicorp/nomadPACKAGE
- https://github.com/hashicorp/nomad/issues/12036WEB
- https://github.com/hashicorp/nomad/releases/tag/v1.2.6WEB
- https://nvd.nist.gov/vuln/detail/CVE-2022-24686ADVISORY
- https://security.netapp.com/advisory/ntap-20220318-0008WEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan