CVE-2021-41845

概要

参考情報

• docs.thycotic.com/bulletins/current/2021/11.0.000007.md · Vendor Advisory
• docs.thycotic.com/ss/11.0.0/release-notes/ss-rn-11-0-000007.md · Release Notes

secret server のその他の脆弱性

• CVE-2019-18357中 6.1An XSS issue was discovered in Thycotic Secret Server before 10.7 (issue 2 of 2).
• CVE-2019-18356中 6.1An XSS issue was discovered in Thycotic Secret Server before 10.7 (issue 1 of 2).
• CVE-2019-18355緊急 9.8An SSRF issue was discovered in the legacy Web launcher in Thycotic Secret Server before 10.7.
• CVE-2014-4861緊急 9.8The Remote Desktop Launcher in Thycotic Secret Server before 8.6.000010 does not properly cleanup a temporary file that contains an encrypte…
• CVE-2017-11725中 5.4The share function in Thycotic Secret Server before 10.2.000019 mishandles the Back Button, leading to unintended redirections.