← Back

CVE-2022-24686

nvd nist
Published: Feb 14, 2022Modified: Jun 17, 2026

JSON object

Loading...
5.9
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Exploitability: 2.2 / Impact: 3.6
Source: NVD

Description

HashiCorp Nomad and Nomad Enterprise 0.3.0 through 1.0.17, 1.1.11, and 1.2.5 artifact download functionality has a race condition such that the Nomad client agent could download the wrong artifact into the wrong destination. Fixed in 1.0.18, 1.1.12, and 1.2.6

Affected (6)

Products: Hashicorp: Nomad
Hashicorp
1 product
Nomad
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Hashicorp
Nomad
0.3.0 ≤ version < 1.0.18
Nomad
1.1.0 ≤ version < 1.1.12
Nomad
1.2.0 ≤ version < 1.2.6
Nomad
0.3.0 ≤ version < 1.0.18
Nomad
1.1.0 ≤ version < 1.1.12
Nomad
1.2.0 ≤ version < 1.2.6

Related CWEs

CWE-362
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

References (6)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.