science1 publisher
Delinea fixed two unauthenticated critical flaws in its credential vault 18 days before disclosing them
The two September 15 disclosures describe a padding oracle and a SAML assertion wrapping bypass in Secret Server's pre-login code path, both reachable without credentials and both already closed in the August build.
Publishers:forkast.news
Reality
- Evidence55
- Adoption28
- Hype gap+35
- Incentives55
- Confidence47