Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Nomad Workload Identity Token Can List Non-sensitive Metadata for Paths Under nomad/
Vulnerability Description
HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.4.1 workload identity token can list non-sensitive metadata for paths under nomad/ that belong to other jobs in the same namespace. Fixed in 1.4.2.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Vulnerability Type
将资源暴露给错误范围
Vulnerability Title
HashiCorp Nomad 安全漏洞
Vulnerability Description
HashiCorp Nomad是美国HashiCorp公司的一个简单灵活的调度器和编排器。用于在本地和云中大规模管理容器和非容器化应用程序。 HashiCorp Nomad和Nomad Enterprise 1.4.0至1.4.1版本存在安全漏洞，该漏洞源于工作负载身份令牌可以列出nomad/下属于同一命名空间中其他作业路径的非敏感元数据。
CVSS Information
N/A
Vulnerability Type
N/A