CVE-2024-12678
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Dec 20, 2024
CWE ID 266
Summary
CVE-2024-12678 is a privilege escalation vulnerability affecting both Nomad Community and Enterprise editions. Malicious actors can exploit this issue by utilizing unredacted workload identity tokens to gain elevated privileges within a namespace. This vulnerability has been addressed in Nomad Community Edition 1.9.4 and 1.8.8, and Nomad Enterprise 1.9.4 and 1.7.16. By exploiting this vulnerability, attackers can bypass intended access controls, potentially leading to unauthorized actions and data compromise.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.