CVE-2021-36758

1Password Connect server before 1.2 is missing validation checks, permitting users to create Secrets Automation access tokens that can be used to perform privilege escalation. Malicious users authorized to create Secrets Automation access tokens can create tokens that have access beyond what the...

AgileBits 1Password 访问控制错误漏洞

Agilebits AgileBits 1Password is a cross-platform account and password management tool from AgileBits Canada. An access control error vulnerability exists in the 1Password Connect server, which stems from a failure to add validation to the Secrets Automation token creation feature, allowing an...