Description
The StrongDM Client insufficiently protected a pre-authentication token. Attackers could exploit this to intercept and reuse the token, potentially redeeming valid authentication credentials through a race condition.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| StrongDM | sdm-cli | ≤ 47.96.0 | — |