Description
In Secret Server on-prem versions earlier than 12.3.1, a user could cause a two-factor pin code to be generated for any account without prior authentication, then bypass the initial login step and authenticate using the second factor alone.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Delinea | Secret Server (On-Prem) | older versions – ≤ 12.2.7 | — |