CVE-2024-25653

Published: Mar 14, 2024Modified: Jun 17, 2026

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Broken Access Control in the Report functionality of Delinea PAM Secret Server 11.4 allows unprivileged users, when Unlimited Admin Mode is enabled, to view system reports and modify custom reports via the Report functionality in the Web UI.

Affected (1)

Products: Delinea: Secret Server

Delinea

1 product

Secret Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Delinea Secret Server	Version 11.4.000000

Related CWEs

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (2)

https://www.cvcn.gov.it/cvcn/cve/CVE-2024-25653

Source: cve@mitre.org

Third Party AdvisoryUS Government Resource

https://www.cvcn.gov.it/cvcn/cve/CVE-2024-25653

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.