Non évaluée
Nomad Exposes Sensitive Workload Identity and Client Secret Token in Audit Logs
CVE-2025-1296
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
Nomad Community and Nomad Enterprise (“Nomad”) are vulnerable to unintentional exposure of the workload identity token and client secret token in audit logs. This vulnerability, identified as CVE-2025-1296, is fixed in Nomad Community Edition 1.9.7 and Nomad Enterprise 1.9.7, 1.8.11, and 1.7.19.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory nvd.nist.gov
- web discuss.hashicorp.com
- web github.com