CVE-2021-36758

1Password Connect server before 1.2 is missing validation checks, permitting users to create Secrets Automation access tokens that can be used to perform privilege escalation. Malicious users authorized to create Secrets Automation access tokens can create tokens that have access beyond what the...

PT-2021-21341

Name of the Vulnerable Software and Affected Versions 1Password Connect server version 1.2 and earlier Description The issue is related to missing validation checks in the 1Password Connect server, allowing users to create Secrets Automation access tokens for privilege escalation. Malicious users...