Broken Access Control in the Report functionality of Delinea PAM Secret Server 11.4 allows unprivileged users, when Unlimited Admin Mode is enabled, to view system reports and modify custom reports via the Report functionality in the Web UI.
References
Configurations
No configuration.
History
21 Nov 2024, 09:01
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.cvcn.gov.it/cvcn/cve/CVE-2024-25653 - |
29 Aug 2024, 20:36
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-284 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.3 |
14 Mar 2024, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-03-14 03:15
Updated : 2024-11-21 09:01
NVD link : CVE-2024-25653
Mitre link : CVE-2024-25653
CVE.ORG link : CVE-2024-25653
JSON object : View
Products Affected
No product.
CWE
CWE-284
Improper Access Control