Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
1Password Connect server before 1.2 is missing validation checks, permitting users to create Secrets Automation access tokens that can be used to perform privilege escalation. Malicious users authorized to create Secrets Automation access tokens can create tokens that have access beyond what the user is authorized to access, but limited to the existing authorizations of the Secret Automation the token is created in.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
AgileBits 1Password 访问控制错误漏洞
Vulnerability Description
Agilebits AgileBits 1Password是加拿大AgileBits（Agilebits）公司的一套跨平台账号密码管理工具。 1Password Connect server 中存在访问控制错误漏洞，该漏洞源于系统未能对Secrets Automation令牌创建功能添加有效的验证功能，攻击者可通过该漏洞创建令牌进行特权升级。以下产品及版本受到影响：1Password Connect server 1.1.1 版本及之前版本。
CVSS Information
N/A
Vulnerability Type
N/A