未評価
Nomad Exposes Sensitive Workload Identity and Client Secret Token in Audit Logs
CVE-2025-1296
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
Nomad Community and Nomad Enterprise (“Nomad”) are vulnerable to unintentional exposure of the workload identity token and client secret token in audit logs. This vulnerability, identified as CVE-2025-1296, is fixed in Nomad Community Edition 1.9.7 and Nomad Enterprise 1.9.7, 1.8.11, and 1.7.19.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web discuss.hashicorp.com
- web github.com