CVE-2026-14886

Vault Enterprise's identity entity batch-delete endpoint is vulnerable to a cross-namespace authorization bypass that may allow an authenticated caller in one namespace to permanently delete the storage backing of entities belonging to another namespace. This vulnerability CVE-2026-14886 is fixed...

CVE-2026-56242 Capgo - Unauthenticated API Key Validity Oracle and User Identity Disclosure via get_identity_apikey_only RPC

Capgo before 12.128.2 contains an unauthenticated security definer RPC function getidentityapikeyonly that returns the owning userid for supplied API keys, creating an API key validity oracle and user identity disclosure primitive. Attackers can call this endpoint with valid or invalid API keys t...

RHEL 6 : python-keystoneclient (RHSA-2013:0944)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2013:0944 advisory. Python-keystoneclient is the client library and command line utility for interacting with the OpenStack identity API. A flaw in Keystone allowed an...

PT-2025-3103 · Unknown +1 · Vaultwarden +1

Name of the Vulnerable Software and Affected Versions: Vaultwarden versions prior to 1.32.5 Description: An issue in the component src/api/identity.rs of Vaultwarden allows attackers to impersonate users, including Administrators, via a crafted authorization request. This issue enables attackers ...

com.auth0:spring-security-auth0 (0.2), com.brienwheeler.web:web-spring-security (>=1.0-release, <=1.11) +48 more potentially affected by CVE-2024-38827 via org.springframework.security:spring-security-core (3.2.4.release)

org.springframework.security:spring-security-core MAVEN version 3.2.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.auth0:spring-security-auth0 0.2 -...

org.cloudfoundry.identity:cloudfoundry-identity-api (>=2.2.4, <=2.7.4.9), org.cloudfoundry.identity:cloudfoundry-identity-app (>=2.2.4, <=2.7.4.7) +6 more potentially affected by CVE-2024-38806 via org.cloudfoundry.identity:cloudfoundry-identity-common (>=1.4.3, <=2.7.4.9)

org.cloudfoundry.identity:cloudfoundry-identity-common MAVEN version =1.4.3, =2.2.4, =2.2.4, =2.2.4, =1.4.3, =2.2.4, =0.4.3, =0.4.0, =0.5.0 - org.trustedanalytics:user-management 0.7.6 Source cves: CVE-2024-38806 Source advisory: MEND:CVE-2024-38806...

org.cloudfoundry.identity:cloudfoundry-identity-api (>=3.0.0, <=4.11.0), org.cloudfoundry.identity:cloudfoundry-identity-app (>=3.0.0, <=4.11.0) +1 more potentially affected by CVE-2024-38806 via org.cloudfoundry.identity:cloudfoundry-identity-server (>=3.0.0, <=4.30.0)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version =3.0.0, =3.0.0, =3.0.0, =3.0.0, =4.30.0 Source cves: CVE-2024-38806 Source advisory: MEND:CVE-2024-38806...

org.cloudfoundry.identity:cloudfoundry-identity-api (3.4.3), org.cloudfoundry.identity:cloudfoundry-identity-app (3.4.3) +1 more potentially affected by CVE-2018-1192 via org.cloudfoundry.identity:cloudfoundry-identity-server (3.4.3)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version 3.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.cloudfoundry.identity:cloudfoundry-identity-server and may be impacted: - org.cloudfoundry.identity:cloudfoundry-identity-api...

org.cloudfoundry.identity:cloudfoundry-identity-api (3.6.0), org.cloudfoundry.identity:cloudfoundry-identity-app (3.6.0) +1 more potentially affected by CVE-2018-1192 via org.cloudfoundry.identity:cloudfoundry-identity-server (3.6.0)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.cloudfoundry.identity:cloudfoundry-identity-server and may be impacted: - org.cloudfoundry.identity:cloudfoundry-identity-api...

org.cloudfoundry.identity:cloudfoundry-identity-api (3.7.3), org.cloudfoundry.identity:cloudfoundry-identity-app (3.7.3) +1 more potentially affected by CVE-2018-1192 via org.cloudfoundry.identity:cloudfoundry-identity-server (3.7.3)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version 3.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.cloudfoundry.identity:cloudfoundry-identity-server and may be impacted: - org.cloudfoundry.identity:cloudfoundry-identity-api...

org.cloudfoundry.identity:cloudfoundry-identity-api (3.10.0), org.cloudfoundry.identity:cloudfoundry-identity-app (3.10.0) +1 more potentially affected by CVE-2018-1192 via org.cloudfoundry.identity:cloudfoundry-identity-server (3.10.0)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version 3.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.cloudfoundry.identity:cloudfoundry-identity-server and may be impacted: - org.cloudfoundry.identity:cloudfoundry-identity-ap...

org.cloudfoundry.identity:cloudfoundry-identity-api (3.12.0), org.cloudfoundry.identity:cloudfoundry-identity-app (3.12.0) +1 more potentially affected by CVE-2018-1192 via org.cloudfoundry.identity:cloudfoundry-identity-server (3.12.0)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version 3.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.cloudfoundry.identity:cloudfoundry-identity-server and may be impacted: - org.cloudfoundry.identity:cloudfoundry-identity-ap...

org.cloudfoundry.identity:cloudfoundry-identity-api (3.15.0), org.cloudfoundry.identity:cloudfoundry-identity-app (3.15.0) +1 more potentially affected by CVE-2018-1192 via org.cloudfoundry.identity:cloudfoundry-identity-server (3.15.0)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version 3.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.cloudfoundry.identity:cloudfoundry-identity-server and may be impacted: - org.cloudfoundry.identity:cloudfoundry-identity-ap...

org.cloudfoundry.identity:cloudfoundry-identity-api (3.18.0), org.cloudfoundry.identity:cloudfoundry-identity-app (3.18.0) +1 more potentially affected by CVE-2018-1192 via org.cloudfoundry.identity:cloudfoundry-identity-server (3.18.0)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version 3.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.cloudfoundry.identity:cloudfoundry-identity-server and may be impacted: - org.cloudfoundry.identity:cloudfoundry-identity-ap...

org.cloudfoundry.identity:cloudfoundry-identity-api (3.19.0), org.cloudfoundry.identity:cloudfoundry-identity-app (3.19.0) +1 more potentially affected by CVE-2018-1192 via org.cloudfoundry.identity:cloudfoundry-identity-server (3.19.0)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version 3.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.cloudfoundry.identity:cloudfoundry-identity-server and may be impacted: - org.cloudfoundry.identity:cloudfoundry-identity-ap...

org.cloudfoundry.identity:cloudfoundry-identity-api (3.20.0), org.cloudfoundry.identity:cloudfoundry-identity-app (3.20.0) +1 more potentially affected by CVE-2018-1192 via org.cloudfoundry.identity:cloudfoundry-identity-server (3.20.0)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version 3.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.cloudfoundry.identity:cloudfoundry-identity-server and may be impacted: - org.cloudfoundry.identity:cloudfoundry-identity-ap...

org.cloudfoundry.identity:cloudfoundry-identity-api (>=4.1.0, <=4.5.0), org.cloudfoundry.identity:cloudfoundry-identity-app (>=4.1.0, <=4.5.0) +1 more potentially affected by CVE-2018-1192 via org.cloudfoundry.identity:cloudfoundry-identity-server (>=4.1.0, <=4.5.0)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version =4.1.0, =4.1.0, =4.1.0, =4.1.0, =4.5.0 Source cves: CVE-2018-1192 Source advisory: OSV:GHSA-XG5V-696H-C3VR...

org.cloudfoundry.identity:cloudfoundry-identity-api (3.0.0), org.cloudfoundry.identity:cloudfoundry-identity-app (3.0.0) +1 more potentially affected by CVE-2018-1192 via org.cloudfoundry.identity:cloudfoundry-identity-server (3.0.0)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.cloudfoundry.identity:cloudfoundry-identity-server and may be impacted: - org.cloudfoundry.identity:cloudfoundry-identity-api...

org.cloudfoundry.identity:cloudfoundry-identity-api (3.2.0), org.cloudfoundry.identity:cloudfoundry-identity-app (3.2.0) +1 more potentially affected by CVE-2018-1192 via org.cloudfoundry.identity:cloudfoundry-identity-server (3.2.0)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.cloudfoundry.identity:cloudfoundry-identity-server and may be impacted: - org.cloudfoundry.identity:cloudfoundry-identity-api...

org.cloudfoundry.identity:cloudfoundry-identity-api (3.2.1), org.cloudfoundry.identity:cloudfoundry-identity-app (3.2.1) +1 more potentially affected by CVE-2018-1192 via org.cloudfoundry.identity:cloudfoundry-identity-server (3.2.1)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.cloudfoundry.identity:cloudfoundry-identity-server and may be impacted: - org.cloudfoundry.identity:cloudfoundry-identity-api...