8.6
Élevée
CVE-2026-45165 An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform…
Description
An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform unauthorized actions on a policy branch. Under specific circumstances, an attacker could potentially leverage this to retrieve unauthorized secrets, alter administrative access controls on the branch or cause a denial of service (DoS). Idira Security Bulletin CA26-38.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Idira Secrets Manager (Self-Hosted) 13.9 | 13.9 → < 13.9.1 | 13.9.1 |
Références
- docs.cyberark.com docs.cyberark.com
Chronologie
- Publiée
- Dernière modification