CVE-2025-3113CWE-284

Improper Access Control in Delphix Masking Engine

Critical · published April 17, 2025

CVSS v4.0
9.0
EPSS
0%
Percentile
25.8
In the wild
Unconfirmed
What it is

A valid, authenticated user with sufficient privileges and who is aware of Continuous Compliance’s internal database configurations can leverage the application’s built-in Connector functionality to access Continuous Compliance’s internal database. This allows the user to explore the internal database schema and export its data, including the properties of Connecters and Rule Sets.

The record
Technical detail
CVSS v4.0
9.0 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
EPSS
0.00336 · 25.8th percentile
Weakness
CWE-284 · Improper Access Control
Published
2025-04-17T06:41Z
EPSS history
Timeline
  • 17 APR 06:41Z
    Improper Access Control in Delphix Masking Engine
    cvelistv5