An attacker of Secrets Manager, Self-Hosted installations that route traffic from Secrets Manager to AWS through a misconfigured network device can reroute authentication requests to a malicious server under the attacker’s control. CyberArk believes there to be very few installations where this issue can be actively exploited, though Secrets Manager, Self-Hosted (formerly Conjur Enterprise) prior to versions 13.5.1 and 13.6.1 and Conjur OSS prior to version 1.22.1 may be affected. Conjur OSS version 1.22.1 and Secrets Manager, Self-Hosted versions 13.5.1 and 13.6.1 fix the issue.
References
| Link | Resource |
|---|---|
| https://github.com/cyberark/conjur/releases/tag/v1.22.1 | Release Notes |
| https://github.com/cyberark/conjur/security/advisories/GHSA-952q-mjrf-wp5j | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
12 Sep 2025, 11:07
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/cyberark/conjur/security/advisories/GHSA-952q-mjrf-wp5j - Vendor Advisory |
11 Sep 2025, 20:22
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Cyberark conjur
Cyberark |
|
| CPE | cpe:2.3:a:cyberark:conjur:*:*:*:*:enterprise:*:*:* cpe:2.3:a:cyberark:conjur:*:*:*:*:open_source:*:*:* cpe:2.3:a:cyberark:conjur:13.6:*:*:*:enterprise:*:*:* |
|
| References | () https://github.com/cyberark/conjur/releases/tag/v1.22.1 - Release Notes | |
| References | () https://github.com/cyberark/conjur/security/advisories/GHSA-952q-mjrf-wp5j - Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
16 Jul 2025, 14:58
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-07-15 21:15
Updated : 2025-09-12 11:07
NVD link : CVE-2025-49831
Mitre link : CVE-2025-49831
CVE.ORG link : CVE-2025-49831
JSON object : View
Products Affected
cyberark
- conjur
CWE
CWE-287
Improper Authentication