Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-7956
9.8
CRITICALCVSS v3
Published
January 31, 2020
CVSS v2
7.5 HIGH
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
HashiCorp Nomad and Nomad Enterprise up to 0.10.2 incorrectly validated role/region associated with TLS certificates used for mTLS RPC, and were susceptible to privilege escalation. Fixed in 0.10.3.
hashicorp/nomad
GitHubNomad is an easy-to-use, flexible, and performant workload orchestrator that can deploy a mix of microservice, batch, containerized, and non-containerized applications. Nomad is easy to operate and scale and has native Consul and Vault integrations.
GitHubNomad is an easy-to-use, flexible, and performant workload orchestrator that can deploy a mix of microservice, batch, containerized, and non-containerized applications. Nomad is easy to operate and scale and has native Consul and Vault integrations.< 0.10.3NVD