title: Nomad Unauthenticated Client Agent HTTP Request Privilege Escalation
description: HashiCorp Nomad and Nomad Enterprise versions 1.5.0 up to 1.5.2 allow unauthenticated users to bypass intended ACL authorizations for clusters where mTLS is not enabled. This issue is fixed in version 1.5.3.
problem types: CWE-862 Missing Authorization
affected:
{
vendor: HashiCorp
product: Nomad
platforms: [64 bit, 32 bit, x86, ARM, MacOS, Windows, Linux]
repo: https://github.com/hashicorp/nomad
versions:
lessThan: 1.5.3, status: affected, version: 1.5.0, versionType: semver
defaultStatus: unaffected
}
{
vendor: HashiCorp
product: Nomad Enterprise
platforms: [64 bit, 32 bit, x86, ARM, MacOS, Windows, Linux]
versions:
lessThan: 1.5.3, status: affected, version: 1.5.0, versionType: semver
defaultStatus: unaffected
}
metrics:
format: CVSS
scenarios: GENERAL
cvssV3_1: [
version: 3.1
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseSeverity: HIGH
baseScore: 10
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
]