Hermes Agent - Pre-Authentication Disk Consumption

T1Covered by 1 source · first reported by Tenable Research at 09 Oct, 15:13 UTC

Hermes Agent - Pre-Authentication Disk Consumption In Hermes Agent the public POST /auth/password-login route copies the client-supplied provider value, with no size limit, into the audit log before rejecting an unknown provider. Because the middleware treats this route as public, an…

security

Sources

• T1Hermes Agent - Pre-Authentication Disk ConsumptionTenable Research09 Oct, 15:13