IAM Authenticator Bypass in Conjur OSS and Secrets Manager, Self-Hosted
CVE-2025-49827
What is CVE-2025-49827?
A vulnerability exists in Conjur OSS and Secrets Manager, Self-Hosted that allows an attacker to bypass the IAM authenticator. If an attacker can manipulate the signed headers from AWS, they can exploit a malformed regular expression to redirect authentication validation requests to a malicious server under their control. This redirection could grant the attacker access to permissions intended for legitimate users, compromising secrecy management in the affected products. Updated versions 1.22.1 for Conjur OSS and 13.5.1, 13.6.1 for Secrets Manager, Self-Hosted effectively resolve the issue.
Affected Version(s)
conjur Conjur OSS >= 1.19.5, < 1.22.1 < Conjur OSS 1.19.5, 1.22.1
conjur Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) >= 13.1, < 13.5.1 < Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) 13.1, 13.5.1
conjur Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) >= 13.6, < 13.6.1 < Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) 13.6, 13.6.1