CVE-2025-49829
EUVD-2025-2155015.07.2025, 20:15
Conjur provides secrets management and application identity for infrastructure. Missing validations in Secrets Manager, Self-Hosted allows authenticated attackers to inject resources into the database and to bypass permission checks. This issue affects Secrets Manager, Self-Hosted (formerly Conjur Enterprise) prior to versions 13.5.1 and 13.6.1 and Conjur OSS prior to version 1.22.1. Conjur OSS version 1.22.1 and Secrets Manager, Self-Hosted versions 13.5.1 and 13.6.1 fix the issue.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| cyberark | conjur | 𝑥 < 1.22.1 |
| cyberark | conjur | 𝑥 < 13.5.1 |
| cyberark | conjur | 13.6 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration