CVE-2025-0937 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Nomad Community and Nomad Enterprise ("Nomad") event stream configured with a wildcard namespace can bypass the ACL Policy allowing reads on other namespaces.
High CVSS: 7.1

CVE-2025-0937

Nomad Community and Nomad Enterprise ("Nomad") event stream configured with a wildcard namespace can bypass the ACL Policy allowing reads on other namespaces.
Vendor
Hashicorp
Product
Nomad
CWE
CWE-863
Yayın Tarihi
2025-02-12 19:15:09
Güncelleme
2025-12-15 21:07:54
Source Identifier
security@hashicorp.com
KEV Date Added
-

Kategoriler

CWE-863 Nomad HIGH Hashicorp 2025

Referanslar

https://discuss.hashicorp.com/t/hcsec-2025-02-nomad-vulnerable-to-event-stream-namespace-acl-policy-bypass-through-wildcard-namespace/73191