Design/Logic Flaw

2021-02-0820:15:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.4%

1Password SCIM Bridge before 1.6.2 mishandles validation of authenticated requests for log files, leading to disclosure of a TLS private key.

CPENameOperatorVersion
scim_bridgege1.0.0
scim_bridgelt1.6.2

CPE	Name	Operator	Version
	scim_bridge	ge	1.0.0
	scim_bridge	lt	1.6.2

References

app-updates.agilebits.com/product_history/SCIM

support.1password.com/kb/202102/