Environment Variable Disclosure in HashiCorp Nomad by HashiCorp

CVE-2019-14802

Summary

An environment variable disclosure vulnerability was found in HashiCorp Nomad versions 0.5.0 through 0.9.4. This flaw allows unintended exposure of sensitive environment variables during the template rendering process in the components nomad/client/allocrunner/taskrunner/template. This can potentially lead to information leakage, compromising the confidentiality of sensitive data. The issue has been addressed in version 0.9.5, and users are encouraged to update their installations to mitigate the risk.

References