CVE-2024-33891

概要

参考情報

• delinea.com/products/secret-server · Product
• docs.delinea.com/online-help/secret-server/release-notes/ss-rn-11-7-000001.htm · Release Notes
• straightblast.medium.com/all-your-secrets-are-belong-to-us-a-delinea-secret-server-authn-authz-bypass-adc26c800ad3 · Exploit
• trust.delinea.com · Vendor Advisory
• straightblast/My-PoC-Exploits · Exploit

secret server のその他の脆弱性

• CVE-2025-12810中 6.5Improper Authentication vulnerability in Delinea Inc. Secret Server On-Prem (RPC Password Rotation modules).This issue affects Secret Server…
• CVE-2025-6943中 4.0Secret Server version 11.7 and earlier is vulnerable to a SQL report creation vulnerability that allows an administrator to gain access to r…
• CVE-2024-12908高 8.3Delinea addressed a reported case on Secret Server v11.7.31 (protocol handler version 6.0.3.26) where, within the protocol handler function,…
• CVE-2024-25653中 4.3Broken Access Control in the Report functionality of Delinea PAM Secret Server 11.4 allows unprivileged users, when Unlimited Admin Mode is …
• CVE-2024-25652高 8.4In Delinea PAM Secret Server 11.4, it is possible for a user assigned "Administer Reports" permission and/or with access to Report functiona…