CVE-2026-115828:詳細資料

CVE-2026-115828

2026-10-30
20h17 +00:00
A01-Broken Access Control
2026-11-05
18h17 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
管理通知

CVE 描述

In Secret Server on-prem versions earlier than 12.3.1, Secret Server did not always validate the PIN or biometric check when using a FIDO2-compliant device

CVE 資訊

相關弱點

CWE-ID 弱點名稱 來源
CWE-284 Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

參考資料