CVE-2023-1296 | BDVDB-2026-197286 Detail
HashiCorpNomad
Description#
HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.5.0 did not correctly enforce deny policies applied to a workload’s variables. Fixed in 1.4.6 and 1.5.1.
Impact#
CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs
Weaknesses#
- CWE-682 Missing Authorization
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.