CVE-2024-25650 — MEDIUM (5.9)

Vulnerability Description

Insecure key exchange between Delinea PAM Secret Server 11.4 and the Distributed Engine 8.4.3 allows a PAM administrator to obtain the Symmetric Key (used to encrypt RabbitMQ messages) via crafted payloads to the /pre-authenticate, /authenticate, and /execute-and-respond REST API endpoints. This makes it possible for a PAM administrator to impersonate the Engine and exfiltrate sensitive information from the messages published in the RabbitMQ exchanges, without being audited in the application.

CVSS Score

5.9

MEDIUM

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

NONE

Availability

NONE

Affected Products

Vendor	Product	Versions
Delinea	Distributed Engine	8.4.3
Delinea	Secret Server	11.4.000000

Related Weaknesses (CWE)

CWE-319

References

https://www.cvcn.gov.it/cvcn/cve/CVE-2024-25650Third Party Advisory
https://www.cvcn.gov.it/cvcn/cve/CVE-2024-25650Third Party Advisory

FAQ

What is CVE-2024-25650?

CVE-2024-25650 is a vulnerability with a CVSS score of 5.9 (MEDIUM). Insecure key exchange between Delinea PAM Secret Server 11.4 and the Distributed Engine 8.4.3 allows a PAM administrator to obtain the Symmetric Key (used to encrypt RabbitMQ messages) via crafted pay...

How severe is CVE-2024-25650?

CVE-2024-25650 has been rated MEDIUM with a CVSS base score of 5.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-25650?

Check the references section above for vendor advisories and patch information. Affected products include: Delinea Distributed Engine, Delinea Secret Server.