CVE-2025-3113: Improper Access Control in Delphix Masking Engine
A valid, authenticated user with sufficient privileges and who is aware of Continuous Compliance’s internal database configurations can leverage the application’s built-in Connector functionality to access Continuous Compliance’s internal database. This allows the user to explore the internal database schema and export its data, including the properties of Connecters and Rule Sets.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3113?
CVE-2025-3113 has a high severity rating due to the potential for unauthorized access to sensitive internal database configurations.
How do I fix CVE-2025-3113?
To fix CVE-2025-3113, ensure that user privileges are properly configured and limit access to the Connector functionality in Continuous Compliance.
What actions can be taken to mitigate CVE-2025-3113?
To mitigate CVE-2025-3113, implement strict access controls and regularly audit user permissions for the Continuous Compliance system.
Who is affected by CVE-2025-3113?
CVE-2025-3113 affects users of the Delphix Masking Engine who possess elevated privileges and knowledge of internal database configurations.
Is there a patch available for CVE-2025-3113?
As of now, a specific patch for CVE-2025-3113 has not been released; users should monitor updates from Delphix for any future patches.