← All advisories

Medium severity6.5NVD Advisory· Published Feb 8, 2021· Updated Jun 17, 2026

CVE-2021-26905

CVE-2021-26905

Description

1Password SCIM Bridge before 1.6.2 mishandles validation of authenticated requests for log files, leading to disclosure of a TLS private key.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

1password/Scim Bridge2 versions
cpe:2.3:a:1password:scim_bridge:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:1password:scim_bridge:*:*:*:*:*:*:*:*range: >=1.0.0,<1.6.2
- (no CPE)
1password/1passwordllm-fuzzy
Range: <1.6.2

Patches

Vulnerability mechanics

References

2

app-updates.agilebits.com/product_history/SCIMnvdRelease NotesThird Party Advisory
support.1password.com/kb/202102/nvdMitigationVendor Advisory

News mentions

0

No linked articles in our index yet.