CVE-2022-3867

Fixed upstream EPSS <1%CVSS 2.7

HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.4.1 event stream subscribers using a token with TTL receive updates until token garbage is collected. Fixed in 1.4.2.

Published 2022-11-10 · CVE record · OSV

Products: HashiCorp Nomad, HashiCorp Nomad Enterprise

Fixed upstream

Ecosystem	Package	Fixed in
Go	github.com/hashicorp/nomad	1.4.2

Distro releases

Release	Package	Fixed in
Ubuntu:18.04:LTS	nomad	no fix
Ubuntu:20.04:LTS	nomad	no fix