CVE-2024-1329

{"id": "CVE-2024-1329", "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.7, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}, "impactScore": 5.8, "exploitabilityScore": 1.3}, {"type": "Primary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2024-02-08T20:15:52.643", "references": [{"url": "https://discuss.hashicorp.com/t/hcsec-2024-03-nomad-vulnerable-to-arbitrary-write-through-symlink-attack", "tags": ["Vendor Advisory"], "source": "[email protected]"}, {"url": "https://discuss.hashicorp.com/t/hcsec-2024-03-nomad-vulnerable-to-arbitrary-write-through-symlink-attack", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-59"}]}, {"type": "Primary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-610"}]}], "descriptions": [{"lang": "en", "value": "HashiCorp Nomad and Nomad Enterprise 1.5.13 up to 1.6.6, and 1.7.3 template renderer is vulnerable to arbitrary file write on the host as the Nomad client user through symlink attacks. This vulnerability, CVE-2024-1329, is fixed in Nomad 1.7.4, 1.6.7, and 1.5.14."}, {"lang": "es", "value": "HashiCorp Nomad y Nomad Enterprise 1.5.13 hasta 1.6.6 y 1.7.3 el renderizador de plantillas es vulnerable a la escritura de archivos arbitrarios en el host como usuario del cliente Nomad a trav\u00e9s de ataques de enlaces simb\u00f3licos. Corregido en Nomad 1.7.4, 1.6.7, 1.5.14."}], "lastModified": "2024-11-21T08:50:20.753", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:hashicorp:nomad:*:*:*:*:-:*:*:*", "vulnerable": true, "matchCriteriaId": "14F75343-9DC2-4C28-A571-7AC0BAEEA00A", "versionEndExcluding": "1.5.14", "versionStartIncluding": "1.5.13"}, {"criteria": "cpe:2.3:a:hashicorp:nomad:*:*:*:*:-:*:*:*", "vulnerable": true, "matchCriteriaId": "EC3377A1-FBDE-4E23-8F8F-E4520F594A8D", "versionEndExcluding": "1.6.7", "versionStartIncluding": "1.6.6"}, {"criteria": "cpe:2.3:a:hashicorp:nomad:*:*:*:*:-:*:*:*", "vulnerable": true, "matchCriteriaId": "EF7459A5-A515-478C-AC04-51674B63357B", "versionEndExcluding": "1.7.4", "versionStartIncluding": "1.7.3."}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:hashicorp:nomad:*:*:*:*:enterprise:*:*:*", "vulnerable": true, "matchCriteriaId": "AC798750-00B8-446C-8ABC-104F4BCF4C77", "versionEndExcluding": "1.5.14", "versionStartIncluding": "1.5.13"}, {"criteria": "cpe:2.3:a:hashicorp:nomad:*:*:*:*:enterprise:*:*:*", "vulnerable": true, "matchCriteriaId": "34BF7182-EA1A-4C8E-9C90-3F03A177E6DF", "versionEndExcluding": "1.6.7", "versionStartIncluding": "1.6.6"}, {"criteria": "cpe:2.3:a:hashicorp:nomad:*:*:*:*:enterprise:*:*:*", "vulnerable": true, "matchCriteriaId": "E250A18C-5782-45C8-867C-477719DDA393", "versionEndExcluding": "1.7.4", "versionStartIncluding": "1.7.3."}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}