Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-3300
5.3
MEDIUMCVSS v3
Severity scale
010
Description
HashiCorp Nomad and Nomad Enterprise 0.11.0 up to 1.5.6 and 1.4.1 HTTP search API can reveal names of available CSI plugins to unauthenticated users or users without the plugin:read policy. Fixed in 1.6.0, 1.5.7, and 1.4.1.
hashicorp/nomad
GitHubNomad is an easy-to-use, flexible, and performant workload orchestrator that can deploy a mix of microservice, batch, containerized, and non-containerized applications. Nomad is easy to operate and scale and has native Consul and Vault integrations.
GitHubNomad is an easy-to-use, flexible, and performant workload orchestrator that can deploy a mix of microservice, batch, containerized, and non-containerized applications. Nomad is easy to operate and scale and has native Consul and Vault integrations.>= 1.5.0, <= 1.5.6, >= 0.11.0, <= 1.4.1NVD