Описание
Broken Access Control in the Report functionality of Delinea PAM Secret Server 11.4 allows unprivileged users, when Unlimited Admin Mode is enabled, to view system reports and modify custom reports via the Report functionality in the Web UI.
Ссылки
- Third Party AdvisoryUS Government Resource
- Third Party AdvisoryUS Government Resource
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:delinea:secret_server:11.4.000000:*:*:*:on-premises:*:*:*
EPSS
Процентиль: 21%
0.00069
Низкий
4.3 Medium
CVSS3
Дефекты
CWE-284
Связанные уязвимости
CVSS3: 4.3
github
почти 2 года назад
Broken Access Control in the Report functionality of Delinea PAM Secret Server 11.4 allows unprivileged users, when Unlimited Admin Mode is enabled, to view system reports and modify custom reports via the Report functionality in the Web UI.
EPSS
Процентиль: 21%
0.00069
Низкий
4.3 Medium
CVSS3
Дефекты
CWE-284