CVE-2024-5866: Arbitrary Directory Listing in Centrify PAS
Vulnerability in Delinea Centrify PAS v. 21.3 and possibly others. The application is prone to the path traversal vulnerability allowing listing of arbitrary directory outside the root directory of the web application. Versions 23.1-HF7 and on have the patch.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Delinea Centrify PASto a version that resolves this vulnerability.Fixed in 23.1-HF7
Event History
Frequently Asked Questions
What is the severity of CVE-2024-5866?
CVE-2024-5866 is a path traversal vulnerability, which can lead to unauthorized directory access, posing a significant security risk.
How do I fix CVE-2024-5866?
To fix CVE-2024-5866, upgrade to Delinea Centrify PAS version 23.1-HF7 or later.
What versions of Delinea Centrify PAS are affected by CVE-2024-5866?
CVE-2024-5866 affects Delinea Centrify PAS versions up to 22.3.
What type of vulnerability is CVE-2024-5866?
CVE-2024-5866 is classified as a path traversal vulnerability.
Can CVE-2024-5866 lead to data exposure?
Yes, CVE-2024-5866 can allow an attacker to list arbitrary directories, potentially leading to data exposure.