PT-2026-48704 · Cyberark+1 · Conjur Enterprise+2
CVE-2026-45178
·
Published
2026-06-11
·
Updated
2026-06-22
CVSS v4.0
8.4
High
| Vector | AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:H/SI:N/SA:L/U:Amber |
Name of the Vulnerable Software and Affected Versions
Idira Secrets Manager Self-Hosted versions 13.8.0 and earlier
Description
Improper access control exists within internal cluster endpoints. A remote, authenticated attacker with standard node-level credentials can exploit these endpoints to retrieve unauthorized secrets or trigger a denial of service (DoS), which is a condition where the system becomes unavailable to its intended users.
Recommendations
Update Idira Secrets Manager Self-Hosted to a version later than 13.8.0.
Fix
DoS
Improper Access Control
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Conjur Enterprise
Idira Secrets Manager
Idira Secrets Manager Credential Providers