CVE-2025-5141CWE-524

Core Privileged Access Manager (BoKS) Leakage of Sensitive Data via the Cache

Medium · published June 17, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
3.3
In the wild
Unconfirmed
What it is

A binary in the BoKS Server Agent component of Fortra's Core Privileged Access Manager (BoKS) on versions 7.2.0 (up to 7.2.0.17), 8.1.0 (up to 8.1.0.22), 8.1.1 (up to 8.1.1.7), 9.0.0 (up to 9.0.0.1) and also legacy tar installs of BoKS 7.2 without hotfix #0474 on Linux, AIX, and Solaris allows low privilege local users to dump data from the cache.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00143 · 3.3th percentile
Weakness
CWE-524 · Use of Cache Containing Sensitive Information
Published
2025-06-17T19:30Z
EPSS history
Timeline
  • 17 JUN 19:30Z
    Core Privileged Access Manager (BoKS) Leakage of Sensitive Data via the Cache
    cvelistv5