← Database

CVE-2026-45178

HIGH CVSS: 8.1 Published: 2026-06-11 Modified: 2026-06-22

Description

Idira Secrets Manager Self-Hosted versions 13.8.0 and lower exhibit improper access control within internal cluster endpoints. A remote, authenticated attacker possessing standard node-level credentials could leverage these endpoints to potentially retrieve unauthorized secrets or cause a denial of service (DoS). CyberArk Security Bulletin: CA26-20

Affected Platforms

Paloaltonetworks Idira Secrets Manager Credential ProvidersPaloaltonetworks Idira Secrets Manager

Weakness Type

CWE-284

References