ghtier
← Back to Enterprise plane incidents
EnterpriseFixed 2024

CVE-2024-1374: Management Console template injection

A Management Console editor reached root SSH on the appliance via Nomad template injection in the audit log forwarding configuration, a mid-tier admin console role escalating straight to host-level control.

Permissions abused

Management Console editor role → root

Frameworks

Part of

Fixed. First seen February 2024. Mapping by ghtier, not yet reviewed. Threat landscape