CVE-2023-4589: Insufficient verification of data authenticity vulnerability in Delinea Secret Server

Published Sep 6, 2023

Updated

Insufficient verification of data authenticity vulnerability in Delinea Secret Server, in its v10.9.000002 version. An attacker with an administrator account could perform software updates without proper integrity verification mechanisms. In this scenario, the update process lacks digital signatures and fails to validate the integrity of the update package, allowing the attacker to inject malicious applications during the update.

Affected Software

1 affected component

Delinea Secret Server=10.9.000002

Event History

Sep 6, 2023

CVE Published

via MITRE·11:48 AM

Data Sourced

via MITRE·11:48 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·12:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-4589?

CVE-2023-4589 is classified as a high severity vulnerability due to the potential impact on data integrity and administrator actions.

How do I fix CVE-2023-4589?

To fix CVE-2023-4589, ensure that you apply the latest security patches provided by Delinea for version 10.9.000002.

Can CVE-2023-4589 be exploited remotely?

CVE-2023-4589 requires an attacker to have an administrator account to exploit the vulnerability, making remote exploitation typically unlikely.

What type of vulnerability is CVE-2023-4589?

CVE-2023-4589 is an insufficient verification of data authenticity vulnerability affecting the Delinea Secret Server software.

Which version of Delinea Secret Server is affected by CVE-2023-4589?

CVE-2023-4589 specifically affects Delinea Secret Server version 10.9.000002.