Researchers uncover RCE attack chains in popular enterprise credential vaults
Open-source credential management systems HashiCorp Vault and CyberArk Conjur had flaws enabled remote code execution among other attacks.
Researchers have found 14 logic flaws in various components of HashiCorp Vault and CyberArk Conjur, two open-source credential management systems, allowing attacks that could bypass authentication checks, access secrets, impersonate identities and execute arbitrary code.
In enterprise environments, non-human identities, such as those used by applications and ...
Read more at csoonline.com