Mmastodon TechnologyCybersecurity first seen 1 d ago, last 1 d ago, peak #10

Zitadel IAM flagged with D trust score over unpatched flaws

Original: Zitadel IAM carries a D trust score: 41 CVEs, max CVSS 9.3, and 97% left unpatched. Auth flaws (CWE-287) recur. Know you

Security analyst Hugo Valters reports that Zitadel, the open-source identity and access management platform, carries a D trust score based on 41 published CVEs, a maximum severity of 9.3, and 97% of vulnerabilities left unpatched. Authentication flaws classified under CWE-287 recur in the vendor's history. He urges organisations to assess their exposure before deploying the software.

Why now: Organisations relying on identity and access management software are being warned about the security risk of deploying it

ZitadelHugo Valters

Open on mastodon →

Evidence

• Zitadel IAM carries a D trust score: 41 CVEs, max CVSS 9.3, and 97% left unpatched. Auth flaws (CWE-287) recur. Know your exposure before you deploy. https://www. valtersit.com/vendors/zitadel/ # cybersecurity # infosec # Zitadel · hugovalters

API: https://socialmediatrends-api.osmike.com/v1/trends/728177