Vulnerability Details CVE-2024-5865
Vulnerability in Delinea Centrify PAS v. 21.3 and possibly others. The application is prone to the path traversal vulnerability allowing arbitrary files reading outside the web publish directory. Versions 23.1-HF7 and on have the patch.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 38.7%
CVSS Severity
CVSS v3 Score 7.7
References
Products affected by CVE-2024-5865
-
cpe:2.3:a:delinea:privileged_access_service:21.3
-
cpe:2.3:a:delinea:privileged_access_service:21.6
-
cpe:2.3:a:delinea:privileged_access_service:21.7
-
cpe:2.3:a:delinea:privileged_access_service:21.8
-
cpe:2.3:a:delinea:privileged_access_service:22.1
-
cpe:2.3:a:delinea:privileged_access_service:22.2
-
cpe:2.3:a:delinea:privileged_access_service:22.3