CVE-2024-12908

Summary

CVE-2024-12908 is a vulnerability affecting Delinea's Secret Server v11.7.31 with protocol handler version 6.0.3.26. The issue lies in the function that compares URIs before normalization and canonicalization, increasing the risk of overmatching against approved lists. Exploitation of this vulnerability could allow a remote attacker to persuade a user to visit a malicious website or open a malicious document, triggering the vulnerable handler and enabling arbitrary code execution on the user's machine. Delinea resolved this issue by implementing additional validation for the downloaded installer's batch file format.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.