- Description
- Secret Server version 11.7 and earlier is vulnerable to a SQL report creation vulnerability that allows an administrator to gain access to restricted tables.
- Source
- 1443cd92-d354-46d2-9290-d812316ca43a
- NVD status
- Analyzed
- Products
- secret_server
CVSS 3.1
- Type
- Primary
- Base score
- 4
- Impact score
- 3.4
- Exploitability score
- 0.6
- Vector string
- CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
- Severity
- MEDIUM
- 1443cd92-d354-46d2-9290-d812316ca43a
- CWE-269
- Hype score
- Not currently trending
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:delinea:secret_server:*:*:*:*:on-premises:*:*:*",
"matchCriteriaId": "623089B9-9783-4EF5-A7A5-515FF1BB6916",
"versionEndExcluding": "11.7.000060",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]