[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fyrLIAk9iGjtOl6r_5WxHl8-FRFZQOeEKu32nOFiCHvU":3,"g5a-risk:CVE-2021-43415":125},{"success":4,"data":5,"meta":123},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":26,"epssTimeSeries":41,"severity":43,"affectedProducts":44,"affectedProductsCount":53,"references":54,"referencesCount":53,"weaknesses":65,"weaknessesCount":69,"isActivelyExploited":70,"cisaInfo":26,"otxData":26,"relatedBlogPosts":71,"seoMetadata":72,"configurations":97,"relatedVendorCves":121,"notableEvents":122},"CVE-2021-43415","What is CVE-2021-43415?","HashiCorp Nomad and Nomad Enterprise up to 1.0.13, 1.1.7, and 1.2.0, with the QEMU task driver enabled, allowed authenticated users with job submission capabilities to bypass the configured allowed image paths. Fixed in 1.0.14, 1.1.8, and 1.2.1.","HashiCorp Nomad and Nomad Enterprise up to 1.0.13, 1.1.7, and 1.2.0, with the QEMU task driver enabled, allowed authenticated users with job submission capab...","2021-12-03T22:15:07.757","2023-08-08T14:22:24.967",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,2.8,5.9,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":34,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":34,"Authentication":35,"ConfidentialityImpact":36,"IntegrityImpact":36,"AvailabilityImpact":36,"BaseScore":37,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:M\u002FAu:S\u002FC:P\u002FI:P\u002FA:P","MEDIUM","SINGLE","PARTIAL",6,6.8,6.4,0.01216,[42,40,40,40,40,40,40],0.01221,"High",[45,50],{"vendor":46,"product":47,"version":48,"criteria":49,"vulnerable":4},"hashicorp","nomad","*","cpe:2.3:a:hashicorp:nomad:*:*:*:*:-:*:*:*",{"vendor":46,"product":47,"version":51,"criteria":52,"vulnerable":4},"1.2.0","cpe:2.3:a:hashicorp:nomad:1.2.0:-:*:*:-:*:*:*",2,[55,61],{"url":56,"source":57,"tags":58},"https:\u002F\u002Fdiscuss.hashicorp.com\u002Ft\u002Fhcsec-2021-31-nomad-qemu-task-driver-allowed-paths-bypass-with-job-args\u002F32288","Hashicorp",[59,60],"Mitigation","Vendor Advisory",{"url":62,"source":57,"tags":63},"https:\u002F\u002Fwww.hashicorp.com\u002Fblog\u002Fcategory\u002Fnomad",[64,60],"Product",[66],{"id":67,"name":67,"description":68},"Unknown","NVD-CWE-Other",1,false,[],{"title":73,"metaDescription":74,"keywords":75,"canonicalUrl":76,"structuredData":77},"What is CVE-2021-43415? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-43415, a high severity cyber security vulnerability from 2021. HashiCorp Nomad and Nomad Enterprise up to 1.0.13, 1.1.7, a...","CVE-2021-43415, CVE-2021-43415 vulnerability, CVE-2021-43415 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, hashicorp security, nomad vulnerability","\u002Fwhat-is\u002Fcve-2021-43415",{"@context":78,"@type":79,"headline":73,"description":74,"datePublished":10,"dateModified":11,"author":80,"publisher":84,"about":88,"mainEntityOfPage":92,"articleSection":95,"keywords":96},"https:\u002F\u002Fschema.org","TechArticle",{"@type":81,"name":82,"url":83},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":81,"name":82,"url":83,"logo":85},{"@type":86,"url":87},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":89,"name":6,"description":90,"additionalType":91},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":93,"@id":94},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-43415","Cybersecurity","CVE-2021-43415, CVE-2021-43415 vulnerability, CVE-2021-43415 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[98],{"Operator":26,"Negate":26,"Nodes":99},[100],{"Operator":101,"Negate":26,"CPEMatch":102},"OR",[103,107,110,114,116,118],{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":104,"VersionStartExcluding":26,"VersionStartIncluding":105,"VersionEndExcluding":106,"VersionEndIncluding":26},"B48B8776-6AD3-46EB-9CC9-179B8CD12BDE","1.0.0","1.0.14",{"Vulnerable":4,"Criteria":108,"MatchCriteriaID":109,"VersionStartExcluding":26,"VersionStartIncluding":105,"VersionEndExcluding":106,"VersionEndIncluding":26},"cpe:2.3:a:hashicorp:nomad:*:*:*:*:enterprise:*:*:*","18A18ED5-746F-4AC7-A488-504D810A232C",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":111,"VersionStartExcluding":26,"VersionStartIncluding":112,"VersionEndExcluding":113,"VersionEndIncluding":26},"6AA406C3-4119-496A-BF0A-4D4CEB596F95","1.1.0","1.1.8",{"Vulnerable":4,"Criteria":108,"MatchCriteriaID":115,"VersionStartExcluding":26,"VersionStartIncluding":112,"VersionEndExcluding":113,"VersionEndIncluding":26},"C8F418FD-A8D5-4710-9293-FAF93FA62D64",{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":117,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"0EAE231F-1DE6-49B2-9E0B-40693FA45641",{"Vulnerable":4,"Criteria":119,"MatchCriteriaID":120,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:hashicorp:nomad:1.2.0:-:*:*:enterprise:*:*:*","D93CCD55-5BDD-481A-BEC7-7AD39C17ECE2",[],[],{"lastModified":11,"cacheTime":124,"version":32},1792439853895,{"score":126,"band":127,"action":128,"scoredAt":129},47,"Medium","Plan remediation","2026-10-16T06:52:34.061063+00:00"]