CVE-2019-12618

HashiCorp Nomad 0.9.0 through 0.9.1 has Incorrect Access Control via the exec driver.

• CWE-269

• https://github.com/hashicorp/nomad/issues/5783Third Party Advisory
• https://www.hashicorp.com/blog/category/nomadVendor Advisory
• https://www.hashicorp.com/blog/hashicorp-nomad-0-9-2Vendor Advisory
• https://github.com/hashicorp/nomad/issues/5783Third Party Advisory
• https://www.hashicorp.com/blog/category/nomadVendor Advisory
• https://www.hashicorp.com/blog/hashicorp-nomad-0-9-2Vendor Advisory

Published

Aug 12, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-12612An issue was discovered in Bitdefender BOX firmware versions…7.8
• CVE-2019-12613Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-12614An issue was discovered in dlpar_parse_cc_property in arch/p…4.1
• CVE-2019-12615An issue was discovered in get_vdev_port_node_info in arch/s…7.5
• CVE-2019-12616An issue was discovered in phpMyAdmin before 4.9.0. A vulner…
• CVE-2019-12617In SilverStripe through 4.3.3, there is access escalation fo…2.7
• CVE-2019-12619A vulnerability in the web interface for Cisco SD-WAN Soluti…6.5
• CVE-2019-1262A cross-site-scripting (XSS) vulnerability exists when Micro…5.4
• CVE-2019-12620A vulnerability in the statistics collection service of Cisc…5.3
• CVE-2019-12621A vulnerability in Cisco HyperFlex Software could allow an u…7.4
• CVE-2019-12622A vulnerability in Cisco RoomOS Software could allow an auth…5.5
• CVE-2019-12623A vulnerability in the web server functionality of Cisco Ent…4.3