CVE-2024-25649

6.7 mediumEPSS 0.08%

Medium (6.7) in delinea secret server. EPSS 0.08% chance of exploitation in the next 30 days.

In Delinea PAM Secret Server 11.4, it is possible for an attacker (with Administrator access to the Secret Server machine) to read the following data from a memory dump: the decrypted master key, database credentials (when SQL Server Authentication is enabled), the encryption key of RabbitMQ queue messages, and session cookies.

Severity

CVSS 3.1

6.7 medium

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N

EPSS: 0.08% chance of exploitation in the next 30 days; higher than 0% of CVEs (scores of 2026-10-31)
CWE: CWE-316
Published: 2024-03-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

delinea:secret_server

References

https://www.cvcn.gov.it/cvcn/cve/CVE-2024-25649
https://www.cvcn.gov.it/cvcn/cve/CVE-2024-25649

Check your stack JSON