CVE-2024-6717

CVSS V2 None CVSS V3 None
Description
HashiCorp Nomad and Nomad Enterprise 1.6.12 up to 1.7.9, and 1.8.1 archive unpacking during migration is vulnerable to path escaping of the allocation directory. This vulnerability, CVE-2024-6717, is fixed in Nomad 1.6.13, 1.7.10, and 1.8.2.
Overview
  • CVE ID
  • CVE-2024-6717
  • Assigner
  • HashiCorp
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2024-07-23T00:16:20.955Z
  • Last Modified Date
  • 2024-07-23T00:16:20.955Z
Weakness Enumerations
CWE URL
CWE-610 http://cwe.mitre.org/data/definitions/610.html
References
Reference URL Reference Tags
https://discuss.hashicorp.com/t/hcsec-2024-15-nomad-vulnerable-to-allocation-directory-path-escape-through-archive-unpacking/68781
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2024-6717
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6717
History
Created Old Value New Value Data Type Notes
2024-07-23 13:12:39 Added to TrackCVE