| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/hashicorp/nomad | ≥ 1.1.0, < 1.1.4< 1.0.10 | 1.1.41.0.10 |
| nomad | ≥ 1.1.1, < 1.1.4≤ 1.0.10< 1.0.10 | 1.1.41.0.10 |
HashiCorp Nomad and Nomad Enterprise Raft RPC layer allows non-server agents with a valid certificate signed by the same CA to access server-only functionality, enabling privilege escalation. Fixed in 1.0.10 and 1.1.4.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free