CVE-2026-115828
5.1 medium
In Secret Server versions earlier than 12.3.1, Secret Server did not always validate the PIN or biometric check when using a FIDO2-compliant device
Severity
CVSS 4.0
5.1 mediumCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N- CWE
- CWE-284
- Published
- Modified
- Record from
- the NVD, synced
References
Check your stackJSON