CVE-2024-5865: Arbitrary File Reading in Centrify PAS
Vulnerability in Delinea Centrify PAS v. 21.3 and possibly others. The application is prone to the path traversal vulnerability allowing arbitrary files reading outside the web publish directory. Versions 23.1-HF7 and on have the patch.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Delinea Centrify PASto a version that resolves this vulnerability.Fixed in 23.1-HF7
Event History
Frequently Asked Questions
What is the severity of CVE-2024-5865?
CVE-2024-5865 has a medium severity rating due to its potential to allow arbitrary file reading outside the web publish directory.
How do I fix CVE-2024-5865?
To fix CVE-2024-5865, upgrade to Delinea Centrify PAS version 23.1-HF7 or later.
What versions are affected by CVE-2024-5865?
CVE-2024-5865 affects Delinea Centrify PAS versions up to 22.3.
What type of vulnerability is CVE-2024-5865?
CVE-2024-5865 is a path traversal vulnerability.
Can CVE-2024-5865 lead to any security risks?
Yes, CVE-2024-5865 can potentially allow unauthorized access to sensitive files on the server.