Unauthorized Access to Remote Sessions Possible in Delinea PAM Secret Server 11.4

CVE-2024-25652

What is CVE-2024-25652?

In Delinea PAM Secret Server version 11.4, an integrity vulnerability allows users with Report functionality access to unauthorized remote sessions. This security flaw enables unauthorized users to potentially view or interact with remote sessions initiated by legitimate users, posing risks of data leakage and compromising secure operations. Organizations should take immediate steps to mitigate this vulnerability and ensure that access controls are correctly configured.

References