Description
In Secret Server on-prem versions earlier than 12.3.1, a user under certain conditions could submit an unsigned JWT and receive cloudadmin permissions in response.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Delinea | Secret Server (On-Prem) | older versions – ≤ 12.2.7 | — |