Privilege escalation in HashiCorp Nomad and Nomad Enterprise



Risk Medium
Patch available YES
Number of vulnerabilities 1
CVE-ID CVE-2021-37218
CWE-ID CWE-264
Exploitation vector Network
Public exploit N/A
Vulnerable software
 Nomad
Server applications / Virtualization software

Nomad Enterprise
Web applications / Modules and components for CMS

Vendor HashiCorp

Security Bulletin

This security bulletin contains one medium risk vulnerability.

1) Permissions, Privileges, and Access Controls

EUVDB-ID: #VU56139

Risk: Medium

CVSSv4.0: 6.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2021-37218

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: No

Description

The vulnerability allows a remote attacker to escalate privileges on the system.

The vulnerability exists due to application does not properly impose security restrictions. A remote authenticated attacker can directly communicate with the server agent’s Raft RPC layer which leads to security restrictions bypass and privilege escalation.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

Nomad: 1.0.0 - 1.1.3

Nomad Enterprise: 1.0.0 - 1.1.3

CPE2.3 External links

https://github.com/hashicorp/nomad/releases/tag/v1.1.4


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###