Improper network isolation in Hashicorp Nomad
Moderate severity
GitHub Reviewed
Published
Jun 24, 2021
to the GitHub Advisory Database
•
Updated Feb 1, 2023
Package
Affected versions
>= 1.0.0, < 1.0.5
< 0.12.12
Patched versions
1.0.5
0.12.12
Description
Published by the National Vulnerability Database
Jun 17, 2021
Reviewed
Jun 18, 2021
Published to the GitHub Advisory Database
Jun 24, 2021
Last updated
Feb 1, 2023
HashiCorp Nomad and Nomad Enterprise up to version 1.0.4 bridge networking mode allows ARP spoofing from other bridged tasks on the same node. Fixed in 0.12.12, 1.0.5, and 1.1.0 RC1.
References