Skip to content
OpenAdvisories

Package · Maven

com.schibsted.security:strongbox-sdk

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium —
    GHSA-mhgm-52vg-pvvc

    Privilege escalation in Strongbox

    ### Impact An attacker with read-only access to a Strongbox secret could craft a valid encrypted secret (same id/version). It also makes the audit logs from KMS less useful. The issue is caused by a bug in the underlying AWS Encryption SDK. By default, the en…

    com.schibsted.security:strongbox-sdk Maven