CVE-2026-115828 : Detail

CVE-2026-115828

2026-10-30
20h17 +00:00
A01-Broken Access Control
2026-11-05
18h17 +00:00
Notifikasi untuk CVE tertentu
Tetap terinformasi tentang perubahan untuk CVE tertentu.
Kelola notifikasi

Deskripsi CVE

In Secret Server on-prem versions earlier than 12.3.1, Secret Server did not always validate the PIN or biometric check when using a FIDO2-compliant device

Informasi CVE

Kelemahan Terkait

CWE-ID Nama Kelemahan Sumber
CWE-284 Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Referensi