Description
Under specific conditions, an attacker can register an attacker-controlled FIDO2 credential against a target account and then authenticate as
that user. This issue affects on-premises deployments only.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Delinea | Secret Server (On-Prem) | 10.6.0 – ≤ 11.7.61, 11.8.0 – ≤ 11.8.1, 11.9.0 – ≤ 11.9.47, 12.0.0 – ≤ 12.0.22, 12.1.0 – ≤ 12.1.2 | — |
References
- https://delinea.com/security-advisories vendor-advisory