Moole Vulnerability Database

Find real vulnerabilities before they ship

High

CVE-2021-3283

HashiCorp Nomad and Nomad Enterprise up to 0.12.9 exec and java task drivers can access processes associated with other tasks on the same node. Fixed in 0.12.10, and 1.0.3.

VectorNETWORK

PublishedFeb 01, 2021, 16:15

Published Bycve@mitre.org

Base Score

Score7.5

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

github.com/hashicorp/nomad(Go)1.0.01.0.3N/A

github.com/hashicorp/nomad(Go)00.12.10N/A

References

https://discuss.hashicorp.com/t/hcsec-2021-01-nomad-s-exec-and-java-task-drivers-did-not-isolate-processes/20332

Weakness Type

NVD-CWE-noinfo

CVSS Metrics

Base Score

7.5

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Base SeverityHigh

Version

3.1

Attack Vector (AV)

NETWORK