Insufficient verification of data authenticity vulnerability in Delinea Secret Server

CVE-2023-4589

What is CVE-2023-4589?

Delinea Secret Server version 10.9.000002 is vulnerable due to insufficient verification mechanisms for data authenticity during software updates. An attacker with administrative privileges can exploit this vulnerability by executing updates that lack proper integrity checks and digital signatures. This failure in the verification process permits the injection of malicious applications into the system under the guise of legitimate updates, posing significant security risks.

References