CVE-2024-5865

Arbitrary File Reading in Centrify PAS

CVSS 7.7 HIGHEPSS 0.5%CWE-26

Vulnerability in Delinea Centrify PAS v. 21.3 and possibly others. The application is prone to the path traversal vulnerability allowing arbitrary files reading outside the web publish directory. Versions 23.1-HF7 and on have the patch.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Affected products

Delinea · Centrify PAS

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/klsecservices/Advisories/blob/master/K-Delinea-2023-001.md