Palo Alto Networks Idira Secrets Manager Credential Providers vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Palo Alto Networks Idira Secrets Manager Credential Providers: 1 record(s), with affected versions and fixes.cpe:2.3:a:paloaltonetworks:idira_secrets_manager_credential_providers
CVE-2026-45178
High · 8.1
CWE-284 Jun 11, 2026
Idira Secrets Manager Self-Hosted: Improper Access Control in Internal Cluster Endpoints
Idira Secrets Manager Self-Hosted versions 13.8.0 and lower exhibit improper access control within internal cluster endpoints. A remote, authenticated attacker possessing standard node-level credentials could leverage these endpoints to potentially retrieve unauthorized secrets or cause a denial of service (DoS). CyberArk Security Bulletin: CA26-20