CVE-2023-3299 Nomad Caller ACL Token's Secret ID is Exposed to Sentinel
Attackers can expose ACL token secret IDs to Sentinel due to a policy parsing error in HashiCorp Nomad Enterprise.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-3299?
CVE-2023-3299 is a low-severity vulnerability in HashiCorp Nomad Enterprise, published on 19 Jul 2023. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
HashiCorp Nomad Enterprise 1.2.11 up to 1.5.6, and 1.4.10 ACL policies using a block without a label generates unexpected results. Fixed in 1.6.0, 1.5.7, and 1.4.11.
Which versions are affected by CVE-2023-3299?
5 open source packages ship an affected version, including github.com/hashicorp/nomad. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
github.com/hashicorp/nomad Go | From 1.2.11 | 1.4.11, 1.5.7 |
github.com/hashicorp/nomad Go | From 1.2.11 | 1.4.11 |
github.com/hashicorp/nomad Go | From 1.2.11 | 1.4.11 |
github.com/hashicorp/nomad Go | From 1.5.0 | 1.5.7 |
github.com/hashicorp/nomad Go | From 1.5.0 | 1.5.7 |
Products include Hashicorp Nomad.
How do I fix CVE-2023-3299?
Upgrade github.com/hashicorp/nomad to a fixed version for your release line: 1.4.11 or 1.5.7.
Is CVE-2023-3299 being exploited?
There is no known exploitation of CVE-2023-3299 in the wild and no public exploit code.
Other vulnerabilities in HashiCorp Nomad Enterprise
- CVE-2023-1782 Nomad Unauthenticated Client Agent HTTP Request Privilege Escalation
- CVE-2022-30324 Privilege escalation in Hashicorp Nomad
- CVE-2020-7956 Improper Certificate Validation in HashiCorp Nomad
- CVE-2019-12618 Hashicorp Nomad Access Control Issues
- CVE-2020-27195 Use After Free in HashiCorp Nomad
Sources
Also known as GHSA-9jfx-84v9-2rr2, GO-2024-2669, UBUNTU-CVE-2023-3299.