CVE-2025-49830

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-49830
Conjur provides secrets management and application identity for infrastructure. An authenticated attacker who is able to load policy can use the policy yaml parser to reference files on the Secrets Manager, Self-Hosted server. These references may be used as reconnaissance to better understand the folder structure of the Secrets Manager/Conjur server or to have the yaml parser include files on the server in the yaml that is processed as the policy loads. This issue affects Secrets Manager, Self-Hosted (formerly Conjur Enterprise) prior to versions 13.5.1 and 13.6.1 and Conjur OSS prior to version 1.22.1. Conjur OSS version 1.22.1 and Secrets Manager, Self-Hosted versions 13.5.1 and 13.6.1 fix the issue.

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://github.com/cyberark/conjur/releases/tag/v1.22.1 Release Notes
https://github.com/cyberark/conjur/security/advisories/GHSA-7m6h-fqrm-m9c5 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:cyberark:conjur:*:*:*:*:open_source:*:*:*
cpe:2.3:a:cyberark:conjur:*:*:*:*:enterprise:*:*:*
cpe:2.3:a:cyberark:conjur:13.6:*:*:*:enterprise:*:*:*
History

11 Sep 2025, 20:25

Type Values Removed Values Added
First Time Cyberark
Cyberark conjur
CPE cpe:2.3:a:cyberark:conjur:*:*:*:*:open_source:*:*:*
cpe:2.3:a:cyberark:conjur:13.6:*:*:*:enterprise:*:*:*
cpe:2.3:a:cyberark:conjur:*:*:*:*:enterprise:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 6.5
References () https://github.com/cyberark/conjur/releases/tag/v1.22.1 - () https://github.com/cyberark/conjur/releases/tag/v1.22.1 - Release Notes
References () https://github.com/cyberark/conjur/security/advisories/GHSA-7m6h-fqrm-m9c5 - () https://github.com/cyberark/conjur/security/advisories/GHSA-7m6h-fqrm-m9c5 - Vendor Advisory

16 Jul 2025, 14:59

Type Values Removed Values Added
Summary
  • (es) Conjur proporciona gestión de secretos e identidad de aplicaciones para la infraestructura. Un atacante autenticado que pueda cargar la política puede usar el analizador YAML de políticas para referenciar archivos en el servidor alojado en Secrets Manager. Estas referencias pueden usarse como reconocimiento para comprender mejor la estructura de carpetas del servidor de Secrets Manager/Conjur o para que el analizador YAML incluya archivos del servidor en el YAML que se procesa al cargar la política. Este problema afecta a Secrets Manager, Self-Hosted (anteriormente Conjur Enterprise) en versiones anteriores a la 13.5.1 y 13.6.1, y a Conjur OSS en versiones anteriores a la 1.22.1. Conjur OSS en la versión 1.22.1 y Secrets Manager, Self-Hosted en las versiones 13.5.1 y 13.6.1 solucionan el problema.

15 Jul 2025, 21:15

Type Values Removed Values Added
References
  • () https://github.com/cyberark/conjur/releases/tag/v1.22.1 -

15 Jul 2025, 20:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-07-15 20:15

Updated : 2025-09-11 20:25

NVD link : CVE-2025-49830

Mitre link : CVE-2025-49830

CVE.ORG link : CVE-2025-49830

JSON object : View

Products Affected

cyberark

  • conjur
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')