Beveiligingsadvies

CVE-2026-43640

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-11 17:14:37

Laatst bijgewerkt 2026-07-14 20:01:13

Toegewezen door VulnCheck

CVSS-score 8.6

Status PUBLISHED

Beschrijving

Bitwarden Server prior to v2026.4.1 does not require master-password re-authentication when retrieving or rotating an organization's SCIM API key, allowing an authenticated user with SCIM management privileges to obtain the key using only a valid session.

← Alle CVE's bekijken Bekijk op cve.org ↗