CVE-2025-1293
HashiCorp Hermes Improperly Validates AWS ALB JWTs, which May Lead to Authentication Bypass
概要
HashiCorp Hermes Improperly Validates AWS ALB JWTs, which May Lead to Authentication Bypass
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Hermes versions up to 0.4.0 improperly validated the JWT provided when using the AWS ALB authentication mode, potentially allowing for authentication bypass. This vulnerability, CVE-2025-1293, was fixed in Hermes 0.5.0.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- web discuss.hashicorp.com