conjur vulnerabilities

3 known vulnerabilities in conjur from CyberArk. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  conjur: Improper Authentication

  CVE-2025-49831Jul 15, 2025CyberArkEPSS 1.19%

  An attacker of Secrets Manager, Self-Hosted installations that route traffic from Secrets Manager to AWS through a misconfigured network device can reroute authentication requests to a malicious server under the attacker’s control. CyberArk believes there to b

• 8.8 High severity

  conjur: Improper Neutralization of Special Elements Used in a Template Engine

  CVE-2025-49828Jul 15, 2025CyberArkEPSS 2.24%

  Conjur provides secrets management and application identity for infrastructure. Conjur OSS versions 1.19.5 through 1.21.1 and Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) 13.1 through 13.4.1 are vulnerable to remote code execution An auth

• 9.8 Critical severity

  conjur: Reliance on Untrusted Inputs in a Security Decision

  CVE-2025-49827Jul 15, 2025CyberArkEPSS 1.45%

  Conjur provides secrets management and application identity for infrastructure. Conjur OSS versions 1.19.5 through 1.22.0 and Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) 13.1 through 13.5 and 13.6 are vulnerable to bypass of the IAM auth