Description
HashiCorp Nomad and Nomad Enterprise 1.5.0 allow a job submitter to escalate to management-level privileges using workload identity and task API. Fixed in 1.5.1.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
HashiCorp Nomad
Default version status: unaffected
1.5.0affected
HashiCorp Nomad Enterprise
Default version status: unaffected
1.5.0affected