Security Advisory

CVE-2021-43415

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-12-03 21:20:12

Last updated 2024-08-04 03:55:29

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

HashiCorp Nomad and Nomad Enterprise up to 1.0.13, 1.1.7, and 1.2.0, with the QEMU task driver enabled, allowed authenticated users with job submission capabilities to bypass the configured allowed image paths. Fixed in 1.0.14, 1.1.8, and 1.2.1.

← Browse all CVEs View on cve.org ↗