CVE Vulnerabilities

CVE-2021-3283

Published: Feb 01, 2021 | Modified: Nov 21, 2024
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM
root.io logo minimus.io logo echo.ai logo

HashiCorp Nomad and Nomad Enterprise up to 0.12.9 exec and java task drivers can access processes associated with other tasks on the same node. Fixed in 0.12.10, and 1.0.3.

Affected Software

NameVendorStart VersionEnd Version
NomadHashicorp*0.12.10 (excluding)
NomadHashicorp1.0.0 (including)1.0.3 (excluding)
NomadUbuntubionic*
NomadUbuntufocal*
NomadUbuntugroovy*
NomadUbuntuhirsute*
NomadUbuntutrusty*

References