CVE-2025-5141: fallo de gravedad media en Fortra Core Privileged Access Manager (BoKS)
Core Privileged Access Manager (BoKS) Leakage of Sensitive Data via the Cache
Publicada el · Actualizada el
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 5.5epss 0.1%
probabilidad de explotación
0.1%top 97% de las CVE
explotación observada
noninguna fuente lo reporta
A binary in the BoKS Server Agent component of Fortra's Core Privileged Access Manager (BoKS) on versions 7.2.0 (up to 7.2.0.17), 8.1.0 (up to 8.1.0.22), 8.1.1 (up to 8.1.1.7), 9.0.0 (up to 9.0.0.1) and also legacy tar installs of BoKS 7.2 without hotfix #0474 on Linux, AIX, and Solaris allows low privilege local users to dump data from the cache.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Productos afectados
Fortra · Core Privileged Access Manager (BoKS)CVEs relacionadas — Fortra Core Privileged Access Manager (BoKS)
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-9862CRITICALCore Privileged Access Manager (BoKS) autoregistration service command injection vulnerabilityEPSS 1.5%CVE-2026-9863HIGHCore Privileged Access Manager (BoKS) upgrade tooling command injection vulnerabilityEPSS 1.0%CVE-2026-14316HIGHHeap buffer overflow in boks_sshd revoked-key error handlingEPSS 0.2%CVE-2026-9864MEDIUMFortra BoKS Server Agent adjoin machine-account password generation vulnerabilityEPSS 0.1%CVE-2025-13532MEDIUMWeak Password Hash in Core Privileged Access Manager (BoKS)EPSS 0.1%