CVE-2025-5141

Published: Jun 17, 2025Modified: Jun 17, 2026Deferred

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: df4dee71-de3a-4139-9588-11b62fe6c0ff (Secondary)

Description

A binary in the BoKS Server Agent component of Fortra's Core Privileged Access Manager (BoKS) on versions 7.2.0 (up to 7.2.0.17), 8.1.0 (up to 8.1.0.22), 8.1.1 (up to 8.1.1.7), 9.0.0 (up to 9.0.0.1) and also legacy tar installs of BoKS 7.2 without hotfix #0474 on Linux, AIX, and Solaris allows low privilege local users to dump data from the cache.

Related CWEs

CWE-524

Use of Cache Containing Sensitive Information

The code uses a cache that contains sensitive information, but the cache can be read by an actor outside of the intended control sphere.

References (1)

https://www.fortra.com/security/advisories/product-security/fi-2025-008

Source: df4dee71-de3a-4139-9588-11b62fe6c0ff

Timeline

No history available yet.