HIGH🇬🇧 English

CVE-2024-5865

CVSS 7.7v3.1pub. 2024-07-02upd. 2024-11-21

Vulnerability in Delinea Centrify PAS v. 21.3 and possibly others. The application is prone to the path traversal vulnerability allowing arbitrary files reading outside the web publish directory. Versions 23.1-HF7 and on have the patch.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

  • Delinea Privileged Access Service

    APP
    Delinea
    ≤ 22.3
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
Path Traversal
CWE
Referencje

Powiązane podatności

CVE-2024-5866MEDIUM5.0ten sam produkt

Vulnerability in Delinea Centrify PAS v. 21.3 and possibly others. The application is prone to the path traver...

CVE-2023-4589CRITICAL9.1ten sam vendor

Insufficient verification of data authenticity vulnerability in Delinea Secret Server, in its v10.9.000002 ver...

CVE-2024-33891HIGH8.8ten sam vendor

Delinea Secret Server before 11.7.000001 allows attackers to bypass authentication via the SOAP API in SecretS...

CVE-2024-25652HIGH7.6ten sam vendor

In Delinea PAM Secret Server 11.4, it is possible for a user assigned "Administer Reports" permission and/or w...

CVE-2025-12810MEDIUM5.3ten sam vendor

Improper Authentication vulnerability in Delinea Inc. Secret Server On-Prem (RPC Password Rotation modules).Th...