PT-2023-16871 · Hashicorp · Nomad Enterprise+1

Publicado 2023-03-14 · Atualizado 2024-08-20 · CVE-2023-1299

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HashiCorp Nomad and Nomad Enterprise version 1.5.0

Description A job submitter can escalate to management-level privileges using workload identity and task API. This issue was introduced due to the exposure of the workload identity token to the workload, allowing access to Nomad HTTP API via a unix domain socket without configuring mTLS. The vulnerability can be exploited if the workload identity does not have any attached ACL policies.

Recommendations For HashiCorp Nomad and Nomad Enterprise version 1.5.0, consider upgrading to Nomad 1.5.1 or newer to resolve the issue. As a temporary workaround, evaluate the risk associated with this issue and consider restricting access to the workload identity and task API until the upgrade is applied.

Correção

Missing Authorization

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2023-1299

GHSA-RQM8-Q8J9-662F

GO-2023-1633

Produtos afetados

Hashicorp Nomad

Nomad Enterprise

Referências · 12

• https://github.com/hashicorp/nomad · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-1299 · Nota de Segurança
• https://t.me/cibsecurity/59966 · Publicação no Telegram
• https://osv.dev/vulnerability/GO-2023-1633 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2023-1299 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-1299 · Aviso do Fabricante
• https://discuss.hashicorp.com/t/hcsec-2023-08-nomad-job-submitter-privilege-escalation-using-workload-identity/51389 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2023-1299 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-1299 · Aviso do Fabricante
• https://t.me/cvenotify/46116 · Publicação no Telegram
• https://github.com/advisories/GHSA-rqm8-q8j9-662f · Nota
• https://osv.dev/vulnerability/GHSA-rqm8-q8j9-662f · Aviso do Fabricante