Vulnerabilities > CVE-2023-3299 - Exposure of Resource to Wrong Sphere vulnerability in Hashicorp Nomad

047910
CVSS 2.7 - LOW
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
HIGH
Confidentiality impact
LOW
Integrity impact
NONE
Availability impact
NONE
network
low complexity
hashicorp
CWE-668

Summary

HashiCorp Nomad Enterprise 1.2.11 up to 1.5.6, and 1.4.10 ACL policies using a block without a label generates unexpected results. Fixed in 1.6.0, 1.5.7, and 1.4.11.

Common Weakness Enumeration (CWE)