CVE-2025-49830 describes a path traversal vulnerability in CyberArk Conjur, affecting Secrets Manager, Self-Hosted (versions prior to 13.5.1 and 13.6.1) and Conjur OSS (versions prior to 1.22.1). An authenticated attacker with policy loading privileges can leverage the YAML parser to reference and potentially include arbitrary files on the server, aiding in reconnaissance of the server's file structure. This medium severity vulnerability (CVSS 6.5) has a low attack complexity and requires local user privileges, with a high impact on confidentiality due to information disclosure. There is currently no evidence of active exploitation, and public exploit code (Metasploit, Nuclei, ExploitDB) is unavailable, though it has garnered some community and media attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 1.22.1CPE matchmatch criteria | cpe:2.3:a:cyberark:conjur:*:*:*:*:open_source:*:*:* | ||
< 13.5.1CPE matchmatch criteria | cpe:2.3:a:cyberark:conjur:*:*:*:*:enterprise:*:*:* | ||
13.6CPE matchmatch criteria | cpe:2.3:a:cyberark:conjur:13.6:*:*:*:enterprise:*:*:* |
CVSS version used by this source: 4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.