---

CVE-2021-37218 - log back

CVE-2021-37218 edited at 09 Sep 2021 12:36:29
Severity	- Unknown + High
Remote	- Unknown + Remote
Type	- Unknown + Privilege escalation
Description	+ In HashiCorp Nomad before version 1.1.4, the Raft RPC layer allows non-server agents with a valid certificate signed by the same CA to access server-only functionality, enabling privilege escalation.
References	+ https://discuss.hashicorp.com/t/hcsec-2021-21-nomad-raft-rpc-privilege-escalation/29023
Notes

CVE-2021-37218 created at 09 Sep 2021 12:35:09