Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) missing validations
Résumé
Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) missing validations
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Conjur provides secrets management and application identity for infrastructure. Missing validations in Secrets Manager, Self-Hosted allows authenticated attackers to inject resources into the database and to bypass permission checks. This issue affects Secrets Manager, Self-Hosted (formerly Conjur Enterprise) prior to versions 13.5.1 and 13.6.1 and Conjur OSS prior to version 1.22.1. Conjur OSS version 1.22.1 and Secrets Manager, Self-Hosted versions 13.5.1 and 13.6.1 fix the issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- web openwall.com
- web openwall.com
- web github.com