HashiCorp Nomad vulnerable to unauthenticated client agent HTTP request privilege escalation
Date: 2023-04
Affected: go/github.com/hashicorp/nomad
Attack vector: auth-bypass
Category: vulnerability-disclosure
Severity: High
CVE: CVE-2023-1782
CWE: CWE-285
CWE-862
CVSS: 8.8 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)

HashiCorp Nomad and Nomad Enterprise versions 1.5.0 up to 1.5.2 allow unauthenticated users to bypass intended ACL authorizations for clusters where mTLS is not enabled. This issue is fixed in version 1.5.3.


Mitigations:

Architectural layers (MAESTRO):