CVE-2024-33891

Published: 2024-04-28T23:15Z

Last Modified: 2025-02-12T15:15Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Delinea Secret Server before 11.7.000001 allows attackers to bypass authentication via the SOAP API in SecretServer/webservices/SSWebService.asmx. This is related to a hardcoded key, the use of the integer 2 for the Admin user, and removal of the oauthExpirationId attribute. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt