CVE-2024-25653

CVSS 4.3 MEDIUMEPSS 0.4%CWE-284

Vexday Risk Score

13Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 4.3EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

14 Mar 2024Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Broken Access Control in the Report functionality of Delinea PAM Secret Server 11.4 allows unprivileged users, when Unlimited Admin Mode is enabled, to view system reports and modify custom reports via the Report functionality in the Web UI.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected products

n/a · n/a

References

https://www.cvcn.gov.it/cvcn/cve/CVE-2024-25653