Vulnerability-Lookup - Search a vulnerability

Refine your search

Product

Sort by

Order

Sources

CVE-2025-49831 (GCVE-0-2025-49831)

Vulnerability from nvd

Published

2025-07-15 20:10

Modified

2025-11-04 21:11

Severity ?

9.1 (Critical) - CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

CWE

CWE-287 - Improper Authentication

Summary

An attacker of Secrets Manager, Self-Hosted installations that route traffic from Secrets Manager to AWS through a misconfigured network device can reroute authentication requests to a malicious server under the attacker’s control. CyberArk believes there to be very few installations where this issue can be actively exploited, though Secrets Manager, Self-Hosted (formerly Conjur Enterprise) prior to versions 13.5.1 and 13.6.1 and Conjur OSS prior to version 1.22.1 may be affected. Conjur OSS version 1.22.1 and Secrets Manager, Self-Hosted versions 13.5.1 and 13.6.1 fix the issue.

References

URL

Tags

	https://github.com/cyberark/conjur/security/advisories/GHSA-952q-mjrf-wp5j	x_refsource_CONFIRM
	https://github.com/cyberark/conjur/releases/tag/v1.22.1	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	cyberark	conjur	Version: Conjur OSS < 1.22.1 Version: Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) < 13.5.1 Version: Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) = 13.6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-49831",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-15T20:32:19.543042Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-15T20:32:30.271Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-04T21:11:31.855Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/08/08/1"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/07/16/7"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "conjur",
          "vendor": "cyberark",
          "versions": [
            {
              "status": "affected",
              "version": "Conjur OSS \u003c 1.22.1"
            },
            {
              "status": "affected",
              "version": "Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) \u003c 13.5.1"
            },
            {
              "status": "affected",
              "version": "Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) = 13.6"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An attacker of Secrets Manager, Self-Hosted installations that route traffic from Secrets Manager to AWS through a misconfigured network device can reroute authentication requests to a malicious server under the attacker\u2019s control. CyberArk believes there to be very few installations where this issue can be actively exploited, though Secrets Manager, Self-Hosted (formerly Conjur Enterprise) prior to versions 13.5.1 and 13.6.1 and Conjur OSS prior to version 1.22.1 may be affected. Conjur OSS version 1.22.1 and Secrets Manager, Self-Hosted versions 13.5.1 and 13.6.1 fix the issue."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-287",
              "description": "CWE-287: Improper Authentication",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-15T20:10:35.367Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/cyberark/conjur/security/advisories/GHSA-952q-mjrf-wp5j",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/cyberark/conjur/security/advisories/GHSA-952q-mjrf-wp5j"
        },
        {
          "name": "https://github.com/cyberark/conjur/releases/tag/v1.22.1",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/cyberark/conjur/releases/tag/v1.22.1"
        }
      ],
      "source": {
        "advisory": "GHSA-952q-mjrf-wp5j",
        "discovery": "UNKNOWN"
      },
      "title": "Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) vulnerable to IAM Authenticator Bypass via Mis-configured Network Device"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2025-49831",
    "datePublished": "2025-07-15T20:10:35.367Z",
    "dateReserved": "2025-06-11T14:33:57.799Z",
    "dateUpdated": "2025-11-04T21:11:31.855Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-49830 (GCVE-0-2025-49830)

Vulnerability from nvd

Published

2025-07-15 20:04

Modified

2025-11-04 21:11

Severity ?

7.1 (High) - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

CWE

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Summary

Conjur provides secrets management and application identity for infrastructure. An authenticated attacker who is able to load policy can use the policy yaml parser to reference files on the Secrets Manager, Self-Hosted server. These references may be used as reconnaissance to better understand the folder structure of the Secrets Manager/Conjur server or to have the yaml parser include files on the server in the yaml that is processed as the policy loads. This issue affects Secrets Manager, Self-Hosted (formerly Conjur Enterprise) prior to versions 13.5.1 and 13.6.1 and Conjur OSS prior to version 1.22.1. Conjur OSS version 1.22.1 and Secrets Manager, Self-Hosted versions 13.5.1 and 13.6.1 fix the issue.

References

URL

Tags

	https://github.com/cyberark/conjur/security/advisories/GHSA-7m6h-fqrm-m9c5	x_refsource_CONFIRM
	https://github.com/cyberark/conjur/releases/tag/v1.22.1	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	cyberark	conjur	Version: Conjur OSS < 1.22.1 Version: Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) < 13.5.1 Version: Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) = 13.6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-49830",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-15T20:33:38.625253Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-15T20:33:51.261Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-04T21:11:29.226Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/08/08/1"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/07/16/7"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "conjur",
          "vendor": "cyberark",
          "versions": [
            {
              "status": "affected",
              "version": "Conjur OSS \u003c 1.22.1"
            },
            {
              "status": "affected",
              "version": "Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) \u003c 13.5.1"
            },
            {
              "status": "affected",
              "version": "Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) = 13.6"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Conjur provides secrets management and application identity for infrastructure. An authenticated attacker who is able to load policy can use the policy yaml parser to reference files on the Secrets Manager, Self-Hosted server. These references may be used as reconnaissance to better understand the folder structure of the Secrets Manager/Conjur server or to have the yaml parser include files on the server in the yaml that is processed as the policy loads. This issue affects Secrets Manager, Self-Hosted (formerly Conjur Enterprise) prior to versions 13.5.1 and 13.6.1 and Conjur OSS prior to version 1.22.1. Conjur OSS version 1.22.1 and Secrets Manager, Self-Hosted versions 13.5.1 and 13.6.1 fix the issue."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "privilegesRequired": "LOW",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-15T20:10:44.466Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/cyberark/conjur/security/advisories/GHSA-7m6h-fqrm-m9c5",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/cyberark/conjur/security/advisories/GHSA-7m6h-fqrm-m9c5"
        },
        {
          "name": "https://github.com/cyberark/conjur/releases/tag/v1.22.1",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/cyberark/conjur/releases/tag/v1.22.1"
        }
      ],
      "source": {
        "advisory": "GHSA-7m6h-fqrm-m9c5",
        "discovery": "UNKNOWN"
      },
      "title": "Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) vulnerable to path traversal and file disclosure"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2025-49830",
    "datePublished": "2025-07-15T20:04:13.380Z",
    "dateReserved": "2025-06-11T14:33:57.799Z",
    "dateUpdated": "2025-11-04T21:11:29.226Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-49829 (GCVE-0-2025-49829)

Vulnerability from nvd

Published

2025-07-15 19:47

Modified

2025-11-04 21:11

Severity ?

6.0 (Medium) - CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N

CWE

CWE-862 - Missing Authorization

Summary

Conjur provides secrets management and application identity for infrastructure. Missing validations in Secrets Manager, Self-Hosted allows authenticated attackers to inject resources into the database and to bypass permission checks. This issue affects Secrets Manager, Self-Hosted (formerly Conjur Enterprise) prior to versions 13.5.1 and 13.6.1 and Conjur OSS prior to version 1.22.1. Conjur OSS version 1.22.1 and Secrets Manager, Self-Hosted versions 13.5.1 and 13.6.1 fix the issue.

References

URL

Tags

	https://github.com/cyberark/conjur/security/advisories/GHSA-9w76-m74g-4c2r	x_refsource_CONFIRM
	https://github.com/cyberark/conjur/releases/tag/v1.22.1	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	cyberark	conjur	Version: Conjur OSS < 1.22.1 Version: Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) < 13.5.1 Version: Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) = 13.6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-49829",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-15T20:15:00.920125Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-15T20:15:36.738Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-04T21:11:26.614Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/08/08/1"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/07/16/7"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "conjur",
          "vendor": "cyberark",
          "versions": [
            {
              "status": "affected",
              "version": "Conjur OSS \u003c 1.22.1"
            },
            {
              "status": "affected",
              "version": "Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) \u003c 13.5.1"
            },
            {
              "status": "affected",
              "version": "Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) = 13.6"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Conjur provides secrets management and application identity for infrastructure. Missing validations in Secrets Manager, Self-Hosted allows authenticated attackers to inject resources into the database and to bypass permission checks. This issue affects Secrets Manager, Self-Hosted (formerly Conjur Enterprise) prior to versions 13.5.1 and 13.6.1 and Conjur OSS prior to version 1.22.1. Conjur OSS version 1.22.1 and Secrets Manager, Self-Hosted versions 13.5.1 and 13.6.1 fix the issue."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "LOW",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "HIGH"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-862",
              "description": "CWE-862: Missing Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-15T20:10:55.957Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/cyberark/conjur/security/advisories/GHSA-9w76-m74g-4c2r",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/cyberark/conjur/security/advisories/GHSA-9w76-m74g-4c2r"
        },
        {
          "name": "https://github.com/cyberark/conjur/releases/tag/v1.22.1",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/cyberark/conjur/releases/tag/v1.22.1"
        }
      ],
      "source": {
        "advisory": "GHSA-9w76-m74g-4c2r",
        "discovery": "UNKNOWN"
      },
      "title": "Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) missing validations"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2025-49829",
    "datePublished": "2025-07-15T19:47:59.612Z",
    "dateReserved": "2025-06-11T14:33:57.799Z",
    "dateUpdated": "2025-11-04T21:11:26.614Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-49828 (GCVE-0-2025-49828)

Vulnerability from nvd

Published

2025-07-15 19:35

Modified

2025-11-04 21:11

Severity ?

8.6 (High) - CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CWE

CWE-1336 - Improper Neutralization of Special Elements Used in a Template Engine

Summary

Conjur provides secrets management and application identity for infrastructure. Conjur OSS versions 1.19.5 through 1.21.1 and Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) 13.1 through 13.4.1 are vulnerable to remote code execution An authenticated attacker who can inject secrets or templates into the Secrets Manager, Self-Hosted database could take advantage of an exposed API endpoint to execute arbitrary Ruby code within the Secrets Manager process. This issue affects both Secrets Manager, Self-Hosted (formerly Conjur Enterprise) and Conjur OSS. Conjur OSS version 1.21.2 and Secrets Manager, Self-Hosted version 13.5 fix the issue.

References

URL

Tags

	https://github.com/cyberark/conjur/security/advisories/GHSA-93hx-v9pv-qrm4	x_refsource_CONFIRM
	https://github.com/cyberark/conjur/releases/tag/v1.21.2	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	cyberark	conjur	Version: Conjur OSS >= 1.20.1, < 1.21.2 Version: Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) >= 13.1, < 13.5

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-49828",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-15T19:50:16.491860Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-15T20:12:43.007Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-04T21:11:23.944Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/08/08/1"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/07/16/7"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "conjur",
          "vendor": "cyberark",
          "versions": [
            {
              "status": "affected",
              "version": "Conjur OSS \u003e= 1.20.1, \u003c 1.21.2"
            },
            {
              "status": "affected",
              "version": "Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) \u003e= 13.1, \u003c 13.5"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Conjur provides secrets management and application identity for infrastructure. Conjur OSS versions 1.19.5 through 1.21.1 and Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) 13.1 through 13.4.1 are vulnerable to remote code execution An authenticated attacker who can inject secrets or templates into the Secrets Manager, Self-Hosted database could take advantage of an exposed API endpoint to execute arbitrary Ruby code within the Secrets Manager process. This issue affects both Secrets Manager, Self-Hosted (formerly Conjur Enterprise) and Conjur OSS. Conjur OSS version 1.21.2 and Secrets Manager, Self-Hosted version 13.5 fix the issue."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "privilegesRequired": "HIGH",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-1336",
              "description": "CWE-1336: Improper Neutralization of Special Elements Used in a Template Engine",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-15T19:35:58.743Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/cyberark/conjur/security/advisories/GHSA-93hx-v9pv-qrm4",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/cyberark/conjur/security/advisories/GHSA-93hx-v9pv-qrm4"
        },
        {
          "name": "https://github.com/cyberark/conjur/releases/tag/v1.21.2",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/cyberark/conjur/releases/tag/v1.21.2"
        }
      ],
      "source": {
        "advisory": "GHSA-93hx-v9pv-qrm4",
        "discovery": "UNKNOWN"
      },
      "title": "Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) Vulnerable to Remote Code Execution"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2025-49828",
    "datePublished": "2025-07-15T19:35:33.147Z",
    "dateReserved": "2025-06-11T14:33:57.799Z",
    "dateUpdated": "2025-11-04T21:11:23.944Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-49827 (GCVE-0-2025-49827)

Vulnerability from nvd

Published

2025-07-15 19:26

Modified

2025-11-04 21:11

Severity ?

9.1 (Critical) - CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

CWE

CWE-807 - Reliance on Untrusted Inputs in a Security Decision

Summary

Conjur provides secrets management and application identity for infrastructure. Conjur OSS versions 1.19.5 through 1.22.0 and Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) 13.1 through 13.5 and 13.6 are vulnerable to bypass of the IAM authenticator. An attacker who can manipulate the headers signed by AWS can take advantage of a malformed regular expression to redirect the authentication validation request that Secrets Manager, Self-Hosted sends to AWS to a malicious server controlled by the attacker. This redirection could result in a bypass of the Secrets Manager, Self-Hosted IAM Authenticator, granting the attacker the permissions granted to the client whose request was manipulated. This issue affects both Secrets Manager, Self-Hosted (formerly Conjur Enterprise) and Conjur OSS. Conjur OSS version 1.22.1 and Secrets Manager, Self-Hosted versions 13.5.1 and 13.6.1 fix the issue.

References

URL

Tags

	https://github.com/cyberark/conjur/security/advisories/GHSA-gmc5-9mpc-xg75	x_refsource_CONFIRM
	https://github.com/cyberark/conjur/releases/tag/v1.22.1	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	cyberark	conjur	Version: Conjur OSS >= 1.19.5, < 1.22.1 Version: Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) >= 13.1, < 13.5.1 Version: Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) >= 13.6, < 13.6.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-49827",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-15T20:42:39.221072Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-15T20:42:47.137Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-04T21:11:21.326Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/08/08/1"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/07/16/7"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "conjur",
          "vendor": "cyberark",
          "versions": [
            {
              "status": "affected",
              "version": "Conjur OSS \u003e= 1.19.5, \u003c 1.22.1"
            },
            {
              "status": "affected",
              "version": "Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) \u003e= 13.1, \u003c 13.5.1"
            },
            {
              "status": "affected",
              "version": "Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) \u003e= 13.6, \u003c 13.6.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Conjur provides secrets management and application identity for infrastructure. Conjur OSS versions 1.19.5 through 1.22.0 and Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) 13.1 through 13.5 and 13.6 are vulnerable to bypass of the IAM authenticator. An attacker who can manipulate the headers signed by AWS can take advantage of a malformed regular expression to redirect the authentication validation request that Secrets Manager, Self-Hosted sends to AWS to a malicious server controlled by the attacker. This redirection could result in a bypass of the Secrets Manager, Self-Hosted IAM Authenticator, granting the attacker the permissions granted to the client whose request was manipulated. This issue affects both Secrets Manager, Self-Hosted (formerly Conjur Enterprise) and Conjur OSS. Conjur OSS version 1.22.1 and Secrets Manager, Self-Hosted versions 13.5.1 and 13.6.1 fix the issue."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-807",
              "description": "CWE-807: Reliance on Untrusted Inputs in a Security Decision",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-15T19:26:06.451Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/cyberark/conjur/security/advisories/GHSA-gmc5-9mpc-xg75",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/cyberark/conjur/security/advisories/GHSA-gmc5-9mpc-xg75"
        },
        {
          "name": "https://github.com/cyberark/conjur/releases/tag/v1.22.1",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/cyberark/conjur/releases/tag/v1.22.1"
        }
      ],
      "source": {
        "advisory": "GHSA-gmc5-9mpc-xg75",
        "discovery": "UNKNOWN"
      },
      "title": "Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) Vulnerable to Bypass of IAM Authenticator"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2025-49827",
    "datePublished": "2025-07-15T19:26:06.451Z",
    "dateReserved": "2025-06-11T14:33:57.799Z",
    "dateUpdated": "2025-11-04T21:11:21.326Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-49831 (GCVE-0-2025-49831)

Vulnerability from cvelistv5

Published

2025-07-15 20:10

Modified

2025-11-04 21:11

Severity ?

9.1 (Critical) - CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

CWE

CWE-287 - Improper Authentication

Summary

An attacker of Secrets Manager, Self-Hosted installations that route traffic from Secrets Manager to AWS through a misconfigured network device can reroute authentication requests to a malicious server under the attacker’s control. CyberArk believes there to be very few installations where this issue can be actively exploited, though Secrets Manager, Self-Hosted (formerly Conjur Enterprise) prior to versions 13.5.1 and 13.6.1 and Conjur OSS prior to version 1.22.1 may be affected. Conjur OSS version 1.22.1 and Secrets Manager, Self-Hosted versions 13.5.1 and 13.6.1 fix the issue.

References

URL

Tags

	https://github.com/cyberark/conjur/security/advisories/GHSA-952q-mjrf-wp5j	x_refsource_CONFIRM
	https://github.com/cyberark/conjur/releases/tag/v1.22.1	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	cyberark	conjur	Version: Conjur OSS < 1.22.1 Version: Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) < 13.5.1 Version: Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) = 13.6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-49831",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-15T20:32:19.543042Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-15T20:32:30.271Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-04T21:11:31.855Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/08/08/1"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/07/16/7"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "conjur",
          "vendor": "cyberark",
          "versions": [
            {
              "status": "affected",
              "version": "Conjur OSS \u003c 1.22.1"
            },
            {
              "status": "affected",
              "version": "Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) \u003c 13.5.1"
            },
            {
              "status": "affected",
              "version": "Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) = 13.6"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An attacker of Secrets Manager, Self-Hosted installations that route traffic from Secrets Manager to AWS through a misconfigured network device can reroute authentication requests to a malicious server under the attacker\u2019s control. CyberArk believes there to be very few installations where this issue can be actively exploited, though Secrets Manager, Self-Hosted (formerly Conjur Enterprise) prior to versions 13.5.1 and 13.6.1 and Conjur OSS prior to version 1.22.1 may be affected. Conjur OSS version 1.22.1 and Secrets Manager, Self-Hosted versions 13.5.1 and 13.6.1 fix the issue."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-287",
              "description": "CWE-287: Improper Authentication",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-15T20:10:35.367Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/cyberark/conjur/security/advisories/GHSA-952q-mjrf-wp5j",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/cyberark/conjur/security/advisories/GHSA-952q-mjrf-wp5j"
        },
        {
          "name": "https://github.com/cyberark/conjur/releases/tag/v1.22.1",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/cyberark/conjur/releases/tag/v1.22.1"
        }
      ],
      "source": {
        "advisory": "GHSA-952q-mjrf-wp5j",
        "discovery": "UNKNOWN"
      },
      "title": "Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) vulnerable to IAM Authenticator Bypass via Mis-configured Network Device"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2025-49831",
    "datePublished": "2025-07-15T20:10:35.367Z",
    "dateReserved": "2025-06-11T14:33:57.799Z",
    "dateUpdated": "2025-11-04T21:11:31.855Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-49830 (GCVE-0-2025-49830)

Vulnerability from cvelistv5

Published

2025-07-15 20:04

Modified

2025-11-04 21:11

Severity ?

7.1 (High) - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

CWE

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Summary

Conjur provides secrets management and application identity for infrastructure. An authenticated attacker who is able to load policy can use the policy yaml parser to reference files on the Secrets Manager, Self-Hosted server. These references may be used as reconnaissance to better understand the folder structure of the Secrets Manager/Conjur server or to have the yaml parser include files on the server in the yaml that is processed as the policy loads. This issue affects Secrets Manager, Self-Hosted (formerly Conjur Enterprise) prior to versions 13.5.1 and 13.6.1 and Conjur OSS prior to version 1.22.1. Conjur OSS version 1.22.1 and Secrets Manager, Self-Hosted versions 13.5.1 and 13.6.1 fix the issue.

References

URL

Tags

	https://github.com/cyberark/conjur/security/advisories/GHSA-7m6h-fqrm-m9c5	x_refsource_CONFIRM
	https://github.com/cyberark/conjur/releases/tag/v1.22.1	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	cyberark	conjur	Version: Conjur OSS < 1.22.1 Version: Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) < 13.5.1 Version: Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) = 13.6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-49830",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-15T20:33:38.625253Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-15T20:33:51.261Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-04T21:11:29.226Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/08/08/1"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/07/16/7"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "conjur",
          "vendor": "cyberark",
          "versions": [
            {
              "status": "affected",
              "version": "Conjur OSS \u003c 1.22.1"
            },
            {
              "status": "affected",
              "version": "Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) \u003c 13.5.1"
            },
            {
              "status": "affected",
              "version": "Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) = 13.6"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Conjur provides secrets management and application identity for infrastructure. An authenticated attacker who is able to load policy can use the policy yaml parser to reference files on the Secrets Manager, Self-Hosted server. These references may be used as reconnaissance to better understand the folder structure of the Secrets Manager/Conjur server or to have the yaml parser include files on the server in the yaml that is processed as the policy loads. This issue affects Secrets Manager, Self-Hosted (formerly Conjur Enterprise) prior to versions 13.5.1 and 13.6.1 and Conjur OSS prior to version 1.22.1. Conjur OSS version 1.22.1 and Secrets Manager, Self-Hosted versions 13.5.1 and 13.6.1 fix the issue."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "privilegesRequired": "LOW",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-15T20:10:44.466Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/cyberark/conjur/security/advisories/GHSA-7m6h-fqrm-m9c5",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/cyberark/conjur/security/advisories/GHSA-7m6h-fqrm-m9c5"
        },
        {
          "name": "https://github.com/cyberark/conjur/releases/tag/v1.22.1",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/cyberark/conjur/releases/tag/v1.22.1"
        }
      ],
      "source": {
        "advisory": "GHSA-7m6h-fqrm-m9c5",
        "discovery": "UNKNOWN"
      },
      "title": "Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) vulnerable to path traversal and file disclosure"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2025-49830",
    "datePublished": "2025-07-15T20:04:13.380Z",
    "dateReserved": "2025-06-11T14:33:57.799Z",
    "dateUpdated": "2025-11-04T21:11:29.226Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-49829 (GCVE-0-2025-49829)

Vulnerability from cvelistv5

Published

2025-07-15 19:47

Modified

2025-11-04 21:11

Severity ?

6.0 (Medium) - CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N

CWE

CWE-862 - Missing Authorization

Summary

Conjur provides secrets management and application identity for infrastructure. Missing validations in Secrets Manager, Self-Hosted allows authenticated attackers to inject resources into the database and to bypass permission checks. This issue affects Secrets Manager, Self-Hosted (formerly Conjur Enterprise) prior to versions 13.5.1 and 13.6.1 and Conjur OSS prior to version 1.22.1. Conjur OSS version 1.22.1 and Secrets Manager, Self-Hosted versions 13.5.1 and 13.6.1 fix the issue.

References

URL

Tags

	https://github.com/cyberark/conjur/security/advisories/GHSA-9w76-m74g-4c2r	x_refsource_CONFIRM
	https://github.com/cyberark/conjur/releases/tag/v1.22.1	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	cyberark	conjur	Version: Conjur OSS < 1.22.1 Version: Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) < 13.5.1 Version: Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) = 13.6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-49829",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-15T20:15:00.920125Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-15T20:15:36.738Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-04T21:11:26.614Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/08/08/1"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/07/16/7"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "conjur",
          "vendor": "cyberark",
          "versions": [
            {
              "status": "affected",
              "version": "Conjur OSS \u003c 1.22.1"
            },
            {
              "status": "affected",
              "version": "Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) \u003c 13.5.1"
            },
            {
              "status": "affected",
              "version": "Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) = 13.6"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Conjur provides secrets management and application identity for infrastructure. Missing validations in Secrets Manager, Self-Hosted allows authenticated attackers to inject resources into the database and to bypass permission checks. This issue affects Secrets Manager, Self-Hosted (formerly Conjur Enterprise) prior to versions 13.5.1 and 13.6.1 and Conjur OSS prior to version 1.22.1. Conjur OSS version 1.22.1 and Secrets Manager, Self-Hosted versions 13.5.1 and 13.6.1 fix the issue."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "LOW",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "HIGH"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-862",
              "description": "CWE-862: Missing Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-15T20:10:55.957Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/cyberark/conjur/security/advisories/GHSA-9w76-m74g-4c2r",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/cyberark/conjur/security/advisories/GHSA-9w76-m74g-4c2r"
        },
        {
          "name": "https://github.com/cyberark/conjur/releases/tag/v1.22.1",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/cyberark/conjur/releases/tag/v1.22.1"
        }
      ],
      "source": {
        "advisory": "GHSA-9w76-m74g-4c2r",
        "discovery": "UNKNOWN"
      },
      "title": "Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) missing validations"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2025-49829",
    "datePublished": "2025-07-15T19:47:59.612Z",
    "dateReserved": "2025-06-11T14:33:57.799Z",
    "dateUpdated": "2025-11-04T21:11:26.614Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-49828 (GCVE-0-2025-49828)

Vulnerability from cvelistv5

Published

2025-07-15 19:35

Modified

2025-11-04 21:11

Severity ?

8.6 (High) - CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CWE

CWE-1336 - Improper Neutralization of Special Elements Used in a Template Engine

Summary

Conjur provides secrets management and application identity for infrastructure. Conjur OSS versions 1.19.5 through 1.21.1 and Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) 13.1 through 13.4.1 are vulnerable to remote code execution An authenticated attacker who can inject secrets or templates into the Secrets Manager, Self-Hosted database could take advantage of an exposed API endpoint to execute arbitrary Ruby code within the Secrets Manager process. This issue affects both Secrets Manager, Self-Hosted (formerly Conjur Enterprise) and Conjur OSS. Conjur OSS version 1.21.2 and Secrets Manager, Self-Hosted version 13.5 fix the issue.

References

URL

Tags

	https://github.com/cyberark/conjur/security/advisories/GHSA-93hx-v9pv-qrm4	x_refsource_CONFIRM
	https://github.com/cyberark/conjur/releases/tag/v1.21.2	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	cyberark	conjur	Version: Conjur OSS >= 1.20.1, < 1.21.2 Version: Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) >= 13.1, < 13.5

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-49828",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-15T19:50:16.491860Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-15T20:12:43.007Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-04T21:11:23.944Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/08/08/1"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/07/16/7"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "conjur",
          "vendor": "cyberark",
          "versions": [
            {
              "status": "affected",
              "version": "Conjur OSS \u003e= 1.20.1, \u003c 1.21.2"
            },
            {
              "status": "affected",
              "version": "Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) \u003e= 13.1, \u003c 13.5"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Conjur provides secrets management and application identity for infrastructure. Conjur OSS versions 1.19.5 through 1.21.1 and Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) 13.1 through 13.4.1 are vulnerable to remote code execution An authenticated attacker who can inject secrets or templates into the Secrets Manager, Self-Hosted database could take advantage of an exposed API endpoint to execute arbitrary Ruby code within the Secrets Manager process. This issue affects both Secrets Manager, Self-Hosted (formerly Conjur Enterprise) and Conjur OSS. Conjur OSS version 1.21.2 and Secrets Manager, Self-Hosted version 13.5 fix the issue."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "privilegesRequired": "HIGH",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-1336",
              "description": "CWE-1336: Improper Neutralization of Special Elements Used in a Template Engine",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-15T19:35:58.743Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/cyberark/conjur/security/advisories/GHSA-93hx-v9pv-qrm4",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/cyberark/conjur/security/advisories/GHSA-93hx-v9pv-qrm4"
        },
        {
          "name": "https://github.com/cyberark/conjur/releases/tag/v1.21.2",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/cyberark/conjur/releases/tag/v1.21.2"
        }
      ],
      "source": {
        "advisory": "GHSA-93hx-v9pv-qrm4",
        "discovery": "UNKNOWN"
      },
      "title": "Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) Vulnerable to Remote Code Execution"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2025-49828",
    "datePublished": "2025-07-15T19:35:33.147Z",
    "dateReserved": "2025-06-11T14:33:57.799Z",
    "dateUpdated": "2025-11-04T21:11:23.944Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-49827 (GCVE-0-2025-49827)

Vulnerability from cvelistv5

Published

2025-07-15 19:26

Modified

2025-11-04 21:11

Severity ?

9.1 (Critical) - CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

CWE

CWE-807 - Reliance on Untrusted Inputs in a Security Decision

Summary

Conjur provides secrets management and application identity for infrastructure. Conjur OSS versions 1.19.5 through 1.22.0 and Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) 13.1 through 13.5 and 13.6 are vulnerable to bypass of the IAM authenticator. An attacker who can manipulate the headers signed by AWS can take advantage of a malformed regular expression to redirect the authentication validation request that Secrets Manager, Self-Hosted sends to AWS to a malicious server controlled by the attacker. This redirection could result in a bypass of the Secrets Manager, Self-Hosted IAM Authenticator, granting the attacker the permissions granted to the client whose request was manipulated. This issue affects both Secrets Manager, Self-Hosted (formerly Conjur Enterprise) and Conjur OSS. Conjur OSS version 1.22.1 and Secrets Manager, Self-Hosted versions 13.5.1 and 13.6.1 fix the issue.

References

URL

Tags

	https://github.com/cyberark/conjur/security/advisories/GHSA-gmc5-9mpc-xg75	x_refsource_CONFIRM
	https://github.com/cyberark/conjur/releases/tag/v1.22.1	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	cyberark	conjur	Version: Conjur OSS >= 1.19.5, < 1.22.1 Version: Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) >= 13.1, < 13.5.1 Version: Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) >= 13.6, < 13.6.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-49827",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-15T20:42:39.221072Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-15T20:42:47.137Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-04T21:11:21.326Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/08/08/1"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/07/16/7"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "conjur",
          "vendor": "cyberark",
          "versions": [
            {
              "status": "affected",
              "version": "Conjur OSS \u003e= 1.19.5, \u003c 1.22.1"
            },
            {
              "status": "affected",
              "version": "Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) \u003e= 13.1, \u003c 13.5.1"
            },
            {
              "status": "affected",
              "version": "Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) \u003e= 13.6, \u003c 13.6.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Conjur provides secrets management and application identity for infrastructure. Conjur OSS versions 1.19.5 through 1.22.0 and Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) 13.1 through 13.5 and 13.6 are vulnerable to bypass of the IAM authenticator. An attacker who can manipulate the headers signed by AWS can take advantage of a malformed regular expression to redirect the authentication validation request that Secrets Manager, Self-Hosted sends to AWS to a malicious server controlled by the attacker. This redirection could result in a bypass of the Secrets Manager, Self-Hosted IAM Authenticator, granting the attacker the permissions granted to the client whose request was manipulated. This issue affects both Secrets Manager, Self-Hosted (formerly Conjur Enterprise) and Conjur OSS. Conjur OSS version 1.22.1 and Secrets Manager, Self-Hosted versions 13.5.1 and 13.6.1 fix the issue."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-807",
              "description": "CWE-807: Reliance on Untrusted Inputs in a Security Decision",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-15T19:26:06.451Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/cyberark/conjur/security/advisories/GHSA-gmc5-9mpc-xg75",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/cyberark/conjur/security/advisories/GHSA-gmc5-9mpc-xg75"
        },
        {
          "name": "https://github.com/cyberark/conjur/releases/tag/v1.22.1",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/cyberark/conjur/releases/tag/v1.22.1"
        }
      ],
      "source": {
        "advisory": "GHSA-gmc5-9mpc-xg75",
        "discovery": "UNKNOWN"
      },
      "title": "Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) Vulnerable to Bypass of IAM Authenticator"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2025-49827",
    "datePublished": "2025-07-15T19:26:06.451Z",
    "dateReserved": "2025-06-11T14:33:57.799Z",
    "dateUpdated": "2025-11-04T21:11:21.326Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Refine your search

10 vulnerabilities found for conjur by cyberark

CVE-2025-49831 (GCVE-0-2025-49831)

Vulnerability from nvd

CVE-2025-49830 (GCVE-0-2025-49830)

Vulnerability from nvd

CVE-2025-49829 (GCVE-0-2025-49829)

Vulnerability from nvd

CVE-2025-49828 (GCVE-0-2025-49828)

Vulnerability from nvd

CVE-2025-49827 (GCVE-0-2025-49827)

Vulnerability from nvd

CVE-2025-49831 (GCVE-0-2025-49831)

Vulnerability from cvelistv5

CVE-2025-49830 (GCVE-0-2025-49830)

Vulnerability from cvelistv5

CVE-2025-49829 (GCVE-0-2025-49829)

Vulnerability from cvelistv5

CVE-2025-49828 (GCVE-0-2025-49828)

Vulnerability from cvelistv5

CVE-2025-49827 (GCVE-0-2025-49827)

Vulnerability from cvelistv5