2023-07-19

2023-07-20

2023-07-21

All (2) Critical (11) High (11) Medium (33) Low (2)

CVE-2023-3072 LOW PATCH Monitor

HashiCorp Nomad and Nomad Enterprise 0.7.0 up to 1.5.6 and 1.4.10 ACL policies using a block without a label generates unexpected results. Rated low severity (CVSS 3.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Hashicorp Nomad

NVD

CVSS 3.1

3.8

EPSS

0.4%

CVE-2023-3299 LOW PATCH Monitor

HashiCorp Nomad Enterprise 1.2.11 up to 1.5.6, and 1.4.10 ACL policies using a block without a label generates unexpected results. Rated low severity (CVSS 2.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Hashicorp Nomad

NVD

CVSS 3.1

2.7

EPSS

0.5%