CVE-2023-4588 File accessibility vulnerability in Delinea Secret Server

Medium 6.8 Published 6 Sep 2023 Updated 6 Sep 2024

An authenticated administrator can expose database credentials by creating a backup in the webroot directory, leading to sensitive information disclosure.

Exploited in the wild: Not known
Login needed: An administrator
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2023-4588?

CVE-2023-4588 is a medium-severity vulnerability in Delinea Secret Server, published on 6 Sep 2023. An attacker needs administrator access to exploit it, with no action from the victim.

Official description

File accessibility vulnerability in Delinea Secret Server, in its v10.9.000002 and v11.4.000002 versions. Exploitation of this vulnerability could allow an authenticated user with administrative privileges to create a backup file in the application's webroot directory, changing the default backup directory to the wwwroot folder, and download it with some configuration files such as encryption.config/ and database.config stored in the wwwroot directory, exposing the database credentials in plain text.

Weakness: CWE-552

Which versions are affected by CVE-2023-4588?

It affects 1 product.

Products include Delinea Secret Server.

How do I fix CVE-2023-4588?

No fix has been published for CVE-2023-4588 yet. Limit exposure of the affected software until one is available.

Is CVE-2023-4588 being exploited?

There is no known exploitation of CVE-2023-4588 in the wild and no public exploit code.

Sources

Also known as GHSA-hg36-f8hx-frw9.