CVE-2026-45165
CVE-2026-45165 · Idira Secrets Manager (Self-Hosted): Improper Authorization in REST API
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform unauthorized actions on a policy branch. Under specific circumstances, an attacker could potentially leverage this to retrieve unauthorized secrets, alter administrative access controls on the branch or cause a denial of service (DoS). Idira Security Bulletin CA26-38.
CVSS 8.6 · Alta · EPSS 0,2% · Corrección disponible
- Publicación
- Actualización
Productos y versiones afectados
idira secrets manager (self-hosted)
- Versiones
- ≥ 13.9, < 13.9.1: Afectada; ≥ 13.9.1: No afectada (custom)
Actualiza a 13.9.1