CVE-2024-25652

概要

参考情報

• docs.delinea.com/online-help/secret-server/admin/unlimited-administration-mode/index.htm · Broken Link
• docs.delinea.com/online-help/secret-server/release-notes/ssc-rn-2024-02-10.htm · Release Notes
• trust.delinea.com · Vendor Advisory
• cvcn.gov.it/cvcn/cve/CVE-2024-25652 · Third Party Advisory

secret server のその他の脆弱性

• CVE-2025-12810中 6.5Improper Authentication vulnerability in Delinea Inc. Secret Server On-Prem (RPC Password Rotation modules).This issue affects Secret Server…
• CVE-2025-6943中 4.0Secret Server version 11.7 and earlier is vulnerable to a SQL report creation vulnerability that allows an administrator to gain access to r…
• CVE-2024-12908高 8.3Delinea addressed a reported case on Secret Server v11.7.31 (protocol handler version 6.0.3.26) where, within the protocol handler function,…
• CVE-2024-33891高 8.8Delinea Secret Server before 11.7.000001 allows attackers to bypass authentication via the SOAP API in SecretServer/webservices/SSWebService…
• CVE-2024-25653中 4.3Broken Access Control in the Report functionality of Delinea PAM Secret Server 11.4 allows unprivileged users, when Unlimited Admin Mode is …