Threats tagged 'ghsa-6736-x63f-c628'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.6	CVE-2026-43640Bitwarden Server prior to v2026.4.1 does not require master-password re-authentication when retrieving or rotating an High8.62026-05-11GCVE DatabaseCVE-2026-43640 Bitwarden Server versions prior to v2026.4.1 have a vulnerability where the system does not require master-password re-authentication when retrieving or rotating an organization's SCIM API key. This allows any authenticated user with SCIM management privileges to obtain the API key using only a valid session, potentially leading to unauthorized access. Report on CVE-2026-43640 Vulnerability CWE-303 #ghsa-6736-x63f-c628	GCVE Database	2026-05-11

Page 1 of 1