CVE-2021-37218
published 2021-09-07CVE-2021-37218: HashiCorp Nomad and Nomad Enterprise Raft RPC layer allows non-server agents with a valid certificate signed by the same CA to access server-only…
PriorityP349high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EPSS
0.67%
47.2th percentile
HashiCorp Nomad and Nomad Enterprise Raft RPC layer allows non-server agents with a valid certificate signed by the same CA to access server-only functionality, enabling privilege escalation. Fixed in 1.0.10 and 1.1.4.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| github.com | hashicorp_nomad | >= 0 < 1.0.10 | 1.0.10 |
| github.com | hashicorp_nomad | >= 1.1.0 < 1.1.4 | 1.1.4 |
| hashicorp | nomad | < 1.0.10 | 1.0.10 |
| hashicorp | nomad | <= 1.0.10 | — |
| hashicorp | nomad | >= 1.1.1 < 1.1.4 | 1.1.4 |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.06.5MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
osv8.8HIGH
vendor_redhat8.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
nomad: Raft RPC privilege escalation
vendor_redhat·2021-09-01·CVSS 8.8
CVE-2021-37218 [HIGH] CWE-295 nomad: Raft RPC privilege escalation
nomad: Raft RPC privilege escalation
HashiCorp Nomad and Nomad Enterprise Raft RPC layer allows non-server agents with a valid certificate signed by the same CA to access server-only functionality, enabling privilege escalation. Fixed in 1.0.10 and 1.1.4.
Package: multicluster-engine (Red Hat Advanced Cluster Management for Kubernetes 2) - Not affected
Package: rhacm2/cluster-curator-controller-rhel8 (Red Hat Advanced Cluster Management for Kubernetes 2) - Not affected
Package: rhacm2/clusterlifecycle-state-metrics-rhel8 (Red Hat Advanced Cluster Management for Kubernetes 2) - Not affected
Package: rhacm2/multicloud-manager-rhel8 (Red Hat Advanced Cluster Management for Kubernetes 2) - Not affected
Package: rhacm2/multiclusterhub-rhel8 (Red Hat Advanced Cluster Management for Kuberne
OSV
Privilege escalation in Hashicorp Nomad in github.com/hashicorp/nomad
osv·2024-08-21
CVE-2021-37218 Privilege escalation in Hashicorp Nomad in github.com/hashicorp/nomad
Privilege escalation in Hashicorp Nomad in github.com/hashicorp/nomad
Privilege escalation in Hashicorp Nomad in github.com/hashicorp/nomad
OSV
Privilege escalation in Hashicorp Nomad
osv·2021-09-08
CVE-2021-37218 [HIGH] Privilege escalation in Hashicorp Nomad
Privilege escalation in Hashicorp Nomad
HashiCorp Nomad and Nomad Enterprise Raft RPC layer allows non-server agents with a valid certificate signed by the same CA to access server-only functionality, enabling privilege escalation. Fixed in 1.0.10 and 1.1.4.
GHSA
Privilege escalation in Hashicorp Nomad
ghsa·2021-09-08
CVE-2021-37218 [HIGH] CWE-295 Privilege escalation in Hashicorp Nomad
Privilege escalation in Hashicorp Nomad
HashiCorp Nomad and Nomad Enterprise Raft RPC layer allows non-server agents with a valid certificate signed by the same CA to access server-only functionality, enabling privilege escalation. Fixed in 1.0.10 and 1.1.4.
OSV
CVE-2021-37218: HashiCorp Nomad and Nomad Enterprise Raft RPC layer allows non-server agents with a valid certificate signed by the same CA to access server-only func
osv·2021-09-07·CVSS 8.8
CVE-2021-37218 [HIGH] CVE-2021-37218: HashiCorp Nomad and Nomad Enterprise Raft RPC layer allows non-server agents with a valid certificate signed by the same CA to access server-only func
HashiCorp Nomad and Nomad Enterprise Raft RPC layer allows non-server agents with a valid certificate signed by the same CA to access server-only functionality, enabling privilege escalation. Fixed in 1.0.10 and 1.1.4.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2021-09-07
Published