← All advisories

Critical severity9.8NVD Advisory· Published Oct 23, 2019· Updated Jun 17, 2026

CVE-2019-18355

CVE-2019-18355

Description

An SSRF issue was discovered in the legacy Web launcher in Thycotic Secret Server before 10.7.

Affected products

3

Thycotic/Secret Server2 versions
cpe:2.3:a:thycotic:secret_server:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:thycotic:secret_server:*:*:*:*:*:*:*:*range: <10.7.000000
- (no CPE)range: <10.7
Thycotic/Secret Serverdescription

Patches

Vulnerability mechanics

References

1

thycotic.force.com/support/s/article/SS-RN-EXT-Secret-Server-10-7-000000-Legacy-Release-NotesnvdRelease NotesVendor Advisory

News mentions

0

No linked articles in our index yet.