CVE-2024-5866

MEDIUM

Delinea Privileged Access Service < 22.3 - Path Traversal

Title source: llm

Description

Vulnerability in Delinea Centrify PAS v. 21.3 and possibly others. The application is prone to the path traversal vulnerability allowing listing of arbitrary directory outside the root directory of the web application. Versions 23.1-HF7 and on have the patch.

References (1)

Core 1

Core References

Third Party Advisory

https://github.com/klsecservices/Advisories/blob/master/K-Delinea-2023-002.md

View Writeup ZIP pw:eip

Scores

CVSS v3 5.0

EPSS 0.0038

EPSS Percentile 29.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-22 CWE-26

Status published

Products (1)

delinea/privileged_access_service < 22.3

Published Jul 02, 2024

Tracked Since Feb 18, 2026