runZero Platform Incorrect Credential Scope Vulnerability Allowing Unauthorized Access
Vulnerability
A vulnerability exists in the runZero Platform that could allow a credential to be updated and used for a task outside of the authorized organization scope. This issue, categorized as CWE-863: Incorrect Authorization, could enable an authenticated user to access confidential credentials from a different organization.
Impact
Exploitation of this vulnerability could lead to unauthorized access to credentials and tasks in an organization that the user does not normally have access to.
Remediation
Users can update to runZero Platform version 4.0.26021.0 to address this vulnerability.
Added: Apr 7, 2026, 5:09 PM
Updated: Apr 7, 2026, 5:09 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
3.8remediation
0.0relevance
5.4threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.