CVE-2025-1293 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Hermes versions up to 0.4.0 improperly validated the JWT provided when using the AWS ALB authentication mode, potentially allowing for authentication bypass. Th…
High CVSS: 8.2

CVE-2025-1293

Hermes versions up to 0.4.0 improperly validated the JWT provided when using the AWS ALB authentication mode, potentially allowing for authentication bypass. This vulnerability, CVE-2025-1293, was fixed in Hermes 0.5.0.
Vendor
Hashicorp
Product
Hermes
CWE
CWE-1390
Yayın Tarihi
2025-02-20 01:15:09
Güncelleme
2025-12-18 15:02:46
Source Identifier
security@hashicorp.com
KEV Date Added
-

Kategoriler

CWE-1390 Hermes HIGH Hashicorp 2025

Referanslar

https://discuss.hashicorp.com/t/hcsec-2025-03-hashicorp-hermes-improperly-validates-aws-alb-jwts-which-may-lead-to-authentication-bypass/73371