CVE-2024-5865CWE-26

Arbitrary File Reading in Centrify PAS

High · published July 2, 2024

CVSS v3.1
7.7
EPSS
0%
Percentile
40.4
In the wild
Unconfirmed
What it is

Vulnerability in Delinea Centrify PAS v. 21.3 and possibly others. The application is prone to the path traversal vulnerability allowing arbitrary files reading outside the web publish directory. Versions 23.1-HF7 and on have the patch.

The record
Technical detail
CVSS v3.1
7.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00479 · 40.4th percentile
Weakness
CWE-26 · Path Traversal: '/dir/../filename'
Published
2024-07-02T15:55Z
EPSS history
Timeline
  • 02 JUL 15:55Z
    Arbitrary File Reading in Centrify PAS
    cvelistv5