CVE-2026-117472mediumCWE-863

CVE-2026-117472: falha de média gravidade em esaqa GmbH Psono

URL prefix handling permits API key read-scope bypass in Psono Server

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Psono

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.3epss 0.3%
Psono Server CE && EE versions 4.0.33 through 7.2.3 compared the request path for the bulk-secret-read endpoint with a hard-coded unprefixed path. In deployments configured with URL_PREFIX, the comparison failed and the POST request was authorized using write scope instead of read scope. An authenticated remote attacker with an unusual read-disabled, write-enabled API key could therefore retrieve encrypted secret data and nonces through the prefixed bulk-secret-read endpoint despite lacking read permission. The default configuration without URL_PREFIX was not affected.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
esaqa GmbH · Psono
CVEs relacionadas — esaqa GmbH Psono

No mesmo produto, das mais perigosas para as menos.

CVE-2026-117468MEDIUMDevice-code claim permits restricted token escalation in Psono ServerEPSS 0.5%CVE-2026-117470MEDIUMWebAuthn assertion replay permits second-factor bypass in Psono ServerEPSS 0.4%CVE-2026-117469MEDIUMFile-transfer type confusion permits unauthorized repository writes in Psono ServerEPSS 0.3%CVE-2026-117471MEDIUMUser-controlled Duo host permits authenticated SSRF in Psono ServerEPSS 0.2%