PT-2022-16797 · Hashicorp · Nomad+1

Published 2022-02-17 · Updated 2024-08-21 · CVE-2022-24683

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions HashiCorp Nomad and Nomad Enterprise versions 0.9.2 through 1.0.17 HashiCorp Nomad and Nomad Enterprise version 1.1.11 HashiCorp Nomad and Nomad Enterprise version 1.2.5

Description The issue allows operators with read-fs and alloc-exec (or job-submit) capabilities to read arbitrary files on the host filesystem as root. This can be exploited by operators with the necessary capabilities, potentially leading to unauthorized access to sensitive information. There are currently no known workarounds.

Recommendations For HashiCorp Nomad and Nomad Enterprise versions 0.9.2 through 1.0.17, upgrade to a version that contains a fix for this issue as soon as possible. For HashiCorp Nomad and Nomad Enterprise version 1.1.11, upgrade to a version that contains a fix for this issue as soon as possible. For HashiCorp Nomad and Nomad Enterprise version 1.2.5, upgrade to a version that contains a fix for this issue as soon as possible. As a temporary workaround, consider restricting the read-fs and alloc-exec (or job-submit) capabilities to minimize the risk of exploitation.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2022-24683

GHSA-WMRX-57HM-MW7R

GO-2022-0584

Affected Products

Nomad

Nomad Enterprise

References · 16

• https://discuss.hashicorp.com/t/hcsec-2022-02-nomad-alloc-filesystem-and-container-escape/35560 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-24683 · Security Note
• https://osv.dev/vulnerability/GO-2022-0584 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-24683 · Security Note
• https://discuss.hashicorp.com · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-24683 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-wmrx-57hm-mw7r · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-24683 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-24683 · Vendor Advisory
• https://github.com/hashicorp/nomad/commit/b3c0e6a7a53d624003698b48b6c59739552c3721 · Note
• https://github.com/hashicorp/nomad/commit/fcb3a5d016a3dfcc63efcdb567373735a0703279 · Note
• https://github.com/hashicorp/nomad/commit/1aa46c3796e924b72eb45a7f02dae32df0c1179c · Note
• https://security.netapp.com/advisory/ntap-20220318-0008 · Note
• https://t.me/cvenotify/27350 · Telegram Post
• https://github.com/advisories/GHSA-wmrx-57hm-mw7r · Note