CVE-2024-25653

4.3 mediumEPSS 0.4%

Medium (4.3) in delinea secret server. EPSS 0.4% chance of exploitation in the next 30 days.

Broken Access Control in the Report functionality of Delinea PAM Secret Server 11.4 allows unprivileged users, when Unlimited Admin Mode is enabled, to view system reports and modify custom reports via the Report functionality in the Web UI.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 33% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2024-03-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

delinea:secret_server

References

https://www.cvcn.gov.it/cvcn/cve/CVE-2024-25653
https://www.cvcn.gov.it/cvcn/cve/CVE-2024-25653

Check your stack JSON