CVE-2025-1296 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Nomad Community and Nomad Enterprise (“Nomad”) are vulnerable to unintentional exposure of the workload identity token and client secret token in audit logs. Th…
Medium CVSS: 6.5

CVE-2025-1296

Nomad Community and Nomad Enterprise (“Nomad”) are vulnerable to unintentional exposure of the workload identity token and client secret token in audit logs. This vulnerability, identified as CVE-2025-1296, is fixed in Nomad Community Edition 1.9.7 and Nomad Enterprise 1.9.7, 1.8.11, and 1.7.19.
Vendor
Hashicorp
Product
Nomad
CWE
CWE-532
Yayın Tarihi
2025-03-10 18:15:30
Güncelleme
2025-12-18 14:41:48
Source Identifier
security@hashicorp.com
KEV Date Added
-

Kategoriler

CWE-532 Nomad MEDIUM Hashicorp 2025

Referanslar

https://discuss.hashicorp.com/t/hcsec-2025-04-nomad-exposes-sensitive-workload-identity-and-client-secret-token-in-audit-logs/73737