Description (CNA)
Idira Secrets Manager SaaS Edge versions prior to 1.8 exhibit improper access control within its internal authentication components. A remote, unauthenticated attacker could exploit this by submitting a specially crafted request. Under specific circumstances, this could allow the attacker to manipulate internal validation mechanisms, potentially leading to a bypass of identity verification and the unauthorized acquisition of an access token. CyberArk Security Bulletin: CA26-20
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| CyberArk Software, a Palo Alto Networks Company / Conjur Cloud (Edge Finding only) | affected 1.0 before 1.8 |
CWE
CWE-284
References
ADP enrichment
No English description supplied.
No references supplied.