Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-115828 1 Delinea 1 Secret Server 2026-11-05 N/A
In Secret Server on-prem versions earlier than 12.3.1, Secret Server did not always validate the PIN or biometric check when using a FIDO2-compliant device
CVE-2026-115830 1 Delinea 1 Secret Server 2026-11-05 N/A
In Secret Server on-prem versions earlier than 12.3.1, a user under certain conditions could submit an unsigned JWT and receive cloudadmin permissions in response.
CVE-2026-115829 1 Delinea 1 Secret Server 2026-11-05 N/A
In Secret Server on-prem versions earlier than 12.3.1, a user could cause a two-factor pin code to be generated for any account without prior authentication, then bypass the initial login step and authenticate using the second factor alone.