CVE-2023-4588
CVSS 3.1 Score 6.8 of 10 (medium)
Details
Summary
CVE-2023-4588 is a file accessibility vulnerability that affects Delinea Secret Server versions 10.9.000002 and 11.4.000002. An authenticated user with administrative privileges can exploit this vulnerability to create a backup file in the application's webroot directory, changing the default backup directory to the wwwroot folder, and download it along with configuration files such as encryption.config/ and database.config stored in the wwwroot directory, exposing database credentials in plain text. The vulnerability has a CVSS v3.1 base score of 6.8, indicating a medium severity level. Remediation of this vulnerability requires applying updates or patches provided by Delinea Secret Server to mitigate the risk it poses to organizations' confidentiality and potentially compromise their databases.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions