HashiCorp Nomad and Nomad Enterprise 1.5.0 allow a job submitter to escalate to management-level privileges using workload identity and task API. Fixed in 1.5.1.
Affected Software
Name |
Vendor |
Start Version |
End Version |
Nomad |
Hashicorp |
1.5.0 |
1.5.0 |
Nomad |
Hashicorp |
1.5.0 |
1.5.0 |
References