News Score: Score the News, Sort the News, Rewrite the Headlines

Researchers uncover RCE attack chains in popular enterprise credential vaults

Open-source credential management systems HashiCorp Vault and CyberArk Conjur had flaws enabled remote code execution among other attacks. Researchers have found 14 logic flaws in various components of HashiCorp Vault and CyberArk Conjur, two open-source credential management systems, allowing attacks that could bypass authentication checks, access secrets, impersonate identities and execute arbitrary code. In enterprise environments, non-human identities, such as those used by applications and ...

Read more at csoonline.com

© News Score  score the news, sort the news, rewrite the headlines