netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish GHSA-7wg4-8m5p-hrfg

Browse Source
This commit is contained in:
advisory-database[bot]
2023-05-22 18:34:57 +00:00
parent b68da78c56
commit eadcf00f84
1 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2022/11/GHSA-7wg4-8m5p-hrfg/GHSA-7wg4-8m5p-hrfg.json
+6 -2
View File
@@ -1,13 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7wg4-8m5p-hrfg",
"modified": "2022-11-10T23:51:44Z",
"modified": "2023-05-22T18:33:41Z",
"published": "2022-11-10T12:01:03Z",
"aliases": [
"CVE-2022-3866"
],
"summary": "HashiCorp Nomad vulnerable to non-sensitive metadata exposure",
"details": "HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.4.1 workload identity token can list non-sensitive metadata for paths under nomad/ that belong to other jobs in the same namespace. Fixed in 1.4.2.",
"details": "HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.4.1 workload identity token can list non-sensitive metadata for paths under `nomad/` that belong to other jobs in the same namespace. Fixed in 1.4.2.",
"severity": [
{
"type": "CVSS_V3",
@@ -40,6 +40,10 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3866"
},
{
"type": "WEB",
"url": "https://github.com/hashicorp/nomad/commit/3b24f26603e2b116ba324101afa8a7e3a7a769a5"
},
{
"type": "WEB",
"url": "https://discuss.hashicorp.com/t/hcsec-2022-25-nomad-s-workload-identity-token-can-list-non-sensitive-metadata-for-nomad-paths/46167"