CVE-2021-26905
Medium
Description
1Password SCIM Bridge before 1.6.2 mishandles validation of authenticated requests for log files, leading to disclosure of a TLS private key.
SeverityMedium
CVSS6.5
Exploit probability—
Product1password Scim Bridge
PublishedFeb 8, 2021
First seenFeb 8, 2021
How to fix
Update
- 1password scim_bridge1.6.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| 1password scim_bridge | 1.0.0 ≤ v < 1.6.2 | 1.6.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.