CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.8. See the original NVD description below for full technical details.
CVE
CVE-2024-7625
Severity
MEDIUM
CVSS
5.8
EPSS
0.33%
Original NVD Description
In HashiCorp Nomad and Nomad Enterprise from 0.6.1 up to 1.6.13, 1.7.10, and 1.8.2, the archive unpacking process is vulnerable to writes outside the allocation directory during migration of allocation directories when multiple archive headers target the same file. This vulnerability, CVE-2024-7625, is fixed in Nomad 1.6.14, 1.7.11, and 1.8.3. Access or compromise of the Nomad client agent at the source allocation first is a prerequisite for leveraging this vulnerability.
Related CVEs
Other vulnerabilities affecting the same vendor(s)