CVE-2024-25649: Medium severity delinea pam secret server vulnerability
In Delinea PAM Secret Server 11.4, it is possible for an attacker (with Administrator access to the Secret Server machine) to read the following data from a memory dump: the decrypted master key, database credentials (when SQL Server Authentication is enabled), the encryption key of RabbitMQ queue messages, and session cookies.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-25649?
CVE-2024-25649 is classified as a high-severity vulnerability due to the potential exposure of sensitive data.
How do I fix CVE-2024-25649?
To remediate CVE-2024-25649, ensure that proper access controls are implemented and consider upgrading to a patched version of Delinea PAM Secret Server.
Who is affected by CVE-2024-25649?
CVE-2024-25649 affects users of Delinea PAM Secret Server version 11.4 who have Administrator access.
What can be exploited through CVE-2024-25649?
An attacker with Administrator access can exploit CVE-2024-25649 to read sensitive information such as the decrypted master key and database credentials.
What types of data are at risk with CVE-2024-25649?
CVE-2024-25649 exposes critical data, including the decrypted master key and database credentials when SQL Server Authentication is enabled.