PT-2020-16990 · Hashicorp+1 · Nomad Enterprise+2

Tgross · Published 2020-11-24 · Updated 2024-08-21 · CVE-2020-28348

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions HashiCorp Nomad and Nomad Enterprise versions 0.9.0 through 0.12.7

Description The client Docker file sandbox feature in HashiCorp Nomad and Nomad Enterprise may be subverted when not explicitly disabled or when using a volume mount type. This issue is related to the github.com/hashicorp/nomad/drivers/docker component.

Recommendations For versions 0.9.0 through 0.12.7, update to version 0.12.8, 0.11.7, or 0.10.8 to resolve the issue. As a temporary workaround, consider disabling the client Docker file sandbox feature until a patch is available. Restrict access to the github.com/hashicorp/nomad/drivers/docker component to minimize the risk of exploitation.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2020-28348

GHSA-5X92-P4P5-33C4

GO-2022-0770

Affected Products

Docker

Nomad

Nomad Enterprise

References · 12

• https://osv.dev/vulnerability/GO-2022-0770 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-28348 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-5x92-p4p5-33c4 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-28348 · Security Note
• https://github.com/hashicorp/nomad/issues/9303 · Note
• https://github.com/hashicorp/nomad/blob/master/CHANGELOG.md#0128-november-10-2020 · Note
• https://github.com/hashicorp/nomad/pull/9321 · Note
• https://t.me/cvenotify/6083 · Telegram Post
• https://discuss.hashicorp.com/t/nomad-0-12-8-0-11-7-and-0-10-8-released/17491 · Note
• https://github.com/advisories/GHSA-5x92-p4p5-33c4 · Note
• https://t.me/cvenotify/6591 · Telegram Post
• https://t.me/cibsecurity/16764 · Telegram Post