Broken Access Control in the Report functionality of Delinea PAM Secret Server 11.4 allows unprivileged users, when Unlimited Admin Mode is enabled, to view system reports and modify custom reports via the Report functionality in the Web UI.
References
| Link | Resource |
|---|---|
| https://www.cvcn.gov.it/cvcn/cve/CVE-2024-25653 | Third Party Advisory US Government Resource |
| https://www.cvcn.gov.it/cvcn/cve/CVE-2024-25653 | Third Party Advisory US Government Resource |
Configurations
History
14 Oct 2025, 17:21
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:delinea:secret_server:11.4.000000:*:*:*:on-premises:*:*:* | |
| First Time |
Delinea
Delinea secret Server |
|
| References | () https://www.cvcn.gov.it/cvcn/cve/CVE-2024-25653 - Third Party Advisory, US Government Resource |
21 Nov 2024, 09:01
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.cvcn.gov.it/cvcn/cve/CVE-2024-25653 - |
29 Aug 2024, 20:36
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-284 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.3 |
14 Mar 2024, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-03-14 03:15
Updated : 2025-10-14 17:21
NVD link : CVE-2024-25653
Mitre link : CVE-2024-25653
CVE.ORG link : CVE-2024-25653
JSON object : View
Products Affected
delinea
- secret_server
CWE
CWE-284
Improper Access Control