CVE-2023-1299

Publication date

2023-03-14 14:46:41

Family

HashiCorp

State

PUBLISHED

Description

HashiCorp Nomad and Nomad Enterprise 1.5.0 allow a job submitter to escalate to management-level privileges using workload identity and task API. Fixed in 1.5.1.