CVE-2024-33891 Hardcoded credentials in n/a
Attackers can bypass authentication and gain admin access via the SOAP API due to hardcoded credentials and logic flaws in Delinea Secret Server.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-33891?
CVE-2024-33891 is a high-severity vulnerability in n/a, published on 28 Apr 2024. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Delinea Secret Server before 11.7.000001 allows attackers to bypass authentication via the SOAP API in SecretServer/webservices/SSWebService.asmx. This is related to a hardcoded key, the use of the integer 2 for the Admin user, and removal of the oauthExpirationId attribute.
Weakness: CWE-321
Which versions are affected by CVE-2024-33891?
It affects 1 product.
Products include Delinea Secret Server.
How do I fix CVE-2024-33891?
No fix has been published for CVE-2024-33891 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-33891 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-33891 exists.
Other vulnerabilities in n/a
- CVE-2023-4589 Insufficient verification of data authenticity vulnerability in Delinea Secret Server
- CVE-2024-25652 Missing authorization in Secret Server
- CVE-2024-12908 Code injection in Secret Server
- CVE-2023-4588 File accessibility vulnerability in Delinea Secret Server
- CVE-2024-25649 Information disclosure in n/a
Sources
Also known as CVE-2024-33331, GHSA-r92g-h2wj-6rv5.