Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-4589
HistorySep 06, 2023 - 12:15 p.m.

Authorization

2023-09-0612:15:00
PRIOn knowledge base
www.prio-n.com
6
authorization
vulnerability
delinea secret server
integrity verification
software updates
digital signatures
malicious applications
nvd

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.3%

Insufficient verification of data authenticity vulnerability in Delinea Secret Server, in its v10.9.000002 version. An attacker with an administrator account could perform software updates without proper integrity verification mechanisms. In this scenario, the update process lacks digital signatures and fails to validate the integrity of the update package, allowing the attacker to inject malicious applications during the update.

CPENameOperatorVersion
secret_servereq10.9.000002

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.3%

Related for PRION:CVE-2023-4589