CVE-2024-1329: hashicorp nomad Link Following
CVSS: 7.7v3.1HighModified
AliasesUBUNTU-CVE-2024-1329GHSA-c866-8gpw-p3mvGO-2024-2538
Published 08-02-2024Last modified 26-09-2024
Vulnerability summary
CVE-2024-1329 is a high (CVSS 7.7) Link Following vulnerability in hashicorp nomad. EPSS estimates a 0.62% chance of exploitation in the next 30 days, higher than 48.6% of scored vulnerabilities.
CVSS score
7.7/10
010
High · v3.1 (CVE.org)EPSS score
0.62%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 08-02-2024PublishedVulnerability first disclosed.
- 26-09-2024Last modifiedVulnerability information updated.
Description
HashiCorp Nomad and Nomad Enterprise 1.5.13 up to 1.6.6, and 1.7.3 template renderer is vulnerable to arbitrary file write on the host as the Nomad client user through symlink attacks. This vulnerability, CVE-2024-1329, is fixed in Nomad 1.7.4, 1.6.7, and 1.5.14.
CVSS metrics
4 scores · 4 sources · 1 versionHigh 7.7Preferred score · CVE.org (CNA)
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:HSources4 sources · 7.5–7.7
- OSV · UbuntuEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NDiffers
- OSV · GoEcosystem advisory · calculated7.7HighCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:H
- NVDNIST7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NDiffers
EPSS trend
Probability
0.62%
Chance of exploitation in the next 30 days
Percentile
49%
Versus all other CVEs
30-day change
0.00 pp
From 0.62% on 20-09-2026
20-09-202620-10-2026
EPSS score0.62%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-59Improper Link Resolution Before File Access ('Link Following')The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
- CWE-610Externally Controlled Reference to a Resource in Another SphereThe product uses an externally controlled name or reference that resolves to a resource that is outside of the intended control sphere.
Affected systems
Hashicorp2 products
- nomad≤ 1.5.13 | ≤ 1.6.6 | ≤ 1.7.3 | ≥ 1.5.13, < 1.5.14 | ≥ 1.6.6, < 1.6.7 | ≥ 1.7.3., < 1.7.4
- nomad enterprise≤ 1.5.13 | ≤ 1.6.6 | ≤ 1.7.3
Github.com/hashicorp1 product
- nomad≥ 1.5.13, < 1.5.14 | ≥ 1.6.0, < 1.6.7 | ≥ 1.7.3, < 1.7.4
Ubuntu1 product
- nomadAll versions (No fix recorded)
3 vendors · 4 products
References
9 links- discuss.hashicorp.com/t/hcsec-2024-03-nomad-vulnerable-to-arbitrary-write-through-symlink-attackREPORTWEBVendor Advisory
- github.com/hashicorp/nomadPACKAGE