Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Failure in Password Rotation and Check-in Mechanism in Secret Server Allows Reuse of Credentials
Vulnerability Description
Improper Authentication vulnerability in Delinea Inc. Secret Server On-Prem (RPC Password Rotation modules).This issue affects Secret Server On-Prem: 11.8.1, 11.9.6, 11.9.25. A secret with "change password on check in" enabled automatically checks in even when the password change fails after reaching its retry limit. This leaves the secret in an inconsistent state with the wrong password. Remediation: Upgrade to 11.9.47 or later. The secret will remain checked out when the password change fails.
CVSS Information
N/A
Vulnerability Type
认证机制不恰当
Vulnerability Title
Delinea Secret Server On-Prem 安全漏洞
Vulnerability Description
Delinea Secret Server On-Prem是美国Delinea公司的一个特权访问管理平台。 Delinea Secret Server On-Prem 11.8.1版本、11.9.6版本和11.9.25版本存在安全漏洞，该漏洞源于身份验证不当，可能导致密码更改失败后秘密仍被自动签入。
CVSS Information
N/A
Vulnerability Type
N/A