CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.9. Exploitation may require the attacker to be authenticated.
CVE
CVE-2023-1782
Severity
CRITICAL
CVSS
9.9
EPSS
0.76%
Original NVD Description
HashiCorp Nomad and Nomad Enterprise versions 1.5.0 up to 1.5.2 allow unauthenticated users to bypass intended ACL authorizations for clusters where mTLS is not enabled. This issue is fixed in version 1.5.3.
Related CVEs
Other vulnerabilities affecting the same vendor(s)