CVE-2024-25650: Medium severity delinea pam secret server vulnerability
Insecure key exchange between Delinea PAM Secret Server 11.4 and the Distributed Engine 8.4.3 allows a PAM administrator to obtain the Symmetric Key (used to encrypt RabbitMQ messages) via crafted payloads to the /pre-authenticate, /authenticate, and /execute-and-respond REST API endpoints. This makes it possible for a PAM administrator to impersonate the Engine and exfiltrate sensitive information from the messages published in the RabbitMQ exchanges, without being audited in the application.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-25650?
CVE-2024-25650 is considered a critical vulnerability due to its potential to expose sensitive encryption keys.
How do I fix CVE-2024-25650?
To fix CVE-2024-25650, update to the latest versions of Delinea PAM Secret Server and Distributed Engine that address this vulnerability.
What systems are affected by CVE-2024-25650?
CVE-2024-25650 affects Delinea PAM Secret Server version 11.4 and Delinea Distributed Engine version 8.4.3.
What type of attack is possible with CVE-2024-25650?
An attacker can exploit CVE-2024-25650 to gain unauthorized access to the symmetric key used for RabbitMQ message encryption.
Are there any workarounds for CVE-2024-25650?
Currently, the recommended mitigation for CVE-2024-25650 is to implement the patch provided by Delinea, as there are no effective workarounds.