CVE-2024-52926 - Vulnerability Details - OpenCVE

Delinea Privilege Manager before 12.0.2 mishandles the security of the Windows agent.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Delinea Privilege Manager	Delinea Privilege Manager

No data.

No data.

References

Link	Providers
https://docs.delinea.com/online-help/privilege-manager/release-notes/12.0.2-combined.htm
https://trust.delinea.com/?tcuUid=3be1a12c-97c9-431e-a51a-0c25da19ec86

History

Tue, 24 Dec 2024 18:45:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-269
References		https://trust.delinea.com/?tcuUid=3be1a12c-97c9-431e-a51a-0c25da19ec86
Metrics	cvssV3_1 `{'score': 7.3, 'vector': 'CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:L/S:U/UI:R'}`	cvssV3_1 `{'score': 6.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H'}`

Mon, 18 Nov 2024 17:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Delinea Privilege Manager Delinea Privilege Manager delinea Privilege Manager
Weaknesses		CWE-276
CPEs		cpe:2.3:a:delinea_privilege_manager:delinea_privilege_manager::::::::
Vendors & Products		Delinea Privilege Manager Delinea Privilege Manager delinea Privilege Manager
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Mon, 18 Nov 2024 04:15:00 +0000

Type	Values Removed	Values Added
Description		Delinea Privilege Manager before 12.0.2 mishandles the security of the Windows agent.
References		https://docs.delinea.com/online-help/privilege-manager/release-notes/12.0.2-combined.htm
Metrics		cvssV3_1 `{'score': 7.3, 'vector': 'CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:L/S:U/UI:R'}`

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2024-11-18T00:00:00

Updated: 2025-01-06T17:55:59.966Z

Reserved: 2024-11-18T00:00:00

Link: CVE-2024-52926

Vulnrichment

Updated: 2024-11-18T16:12:00.558Z

NVD

Status : Awaiting Analysis

Published: 2024-11-18T04:15:05.140

Modified: 2024-12-24T19:15:06.940

Link: CVE-2024-52926

Redhat

No data.

{"dataType": "CVE_RECORD", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2024-52926", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2025-01-06T17:55:59.966Z", "dateReserved": "2024-11-18T00:00:00", "datePublished": "2024-11-18T00:00:00"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Privilege Manager", "vendor": "Delinea", "versions": [{"status": "affected", "version": "n/a"}]}], "credits": [{"lang": "en", "type": "finder", "value": "Osanda Jayathissa of Visa"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>Delinea Privilege Manager before 12.0.2 mishandles the security of the Windows agent.</p>"}], "value": "Delinea Privilege Manager before 12.0.2 mishandles the security of the Windows agent."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-269", "description": "CWE-269 Improper Privilege Management", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "1443cd92-d354-46d2-9290-d812316ca43a", "shortName": "Delinea", "dateUpdated": "2024-12-24T18:31:45.418Z"}, "references": [{"tags": ["release-notes"], "url": "https://docs.delinea.com/online-help/privilege-manager/release-notes/12.0.2-combined.htm"}, {"tags": ["vendor-advisory"], "url": "https://trust.delinea.com/?tcuUid=3be1a12c-97c9-431e-a51a-0c25da19ec86"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-276", "lang": "en", "description": "CWE-276 Incorrect Default Permissions"}]}], "affected": [{"vendor": "delinea_privilege_manager", "product": "delinea_privilege_manager", "cpes": ["cpe:2.3:a:delinea_privilege_manager:delinea_privilege_manager:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "12.0.2", "versionType": "custom"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-11-18T16:03:24.164924Z", "id": "CVE-2024-52926", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-01-06T17:55:59.966Z"}}]}, "dataVersion": "5.1"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-52926", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-11-18T16:03:24.164924Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:delinea_privilege_manager:delinea_privilege_manager:*:*:*:*:*:*:*:*"], "vendor": "delinea_privilege_manager", "product": "delinea_privilege_manager", "versions": [{"status": "affected", "version": "0", "lessThan": "12.0.2", "versionType": "custom"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-276", "description": "CWE-276 Incorrect Default Permissions"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-18T16:12:00.558Z"}}], "cna": {"source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "Osanda Jayathissa of Visa"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Delinea", "product": "Privilege Manager", "versions": [{"status": "affected", "version": "n/a"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://docs.delinea.com/online-help/privilege-manager/release-notes/12.0.2-combined.htm", "tags": ["release-notes"]}, {"url": "https://trust.delinea.com/?tcuUid=3be1a12c-97c9-431e-a51a-0c25da19ec86", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "Delinea Privilege Manager before 12.0.2 mishandles the security of the Windows agent.", "supportingMedia": [{"type": "text/html", "value": "<p>Delinea Privilege Manager before 12.0.2 mishandles the security of the Windows agent.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-269", "description": "CWE-269 Improper Privilege Management"}]}], "providerMetadata": {"orgId": "1443cd92-d354-46d2-9290-d812316ca43a", "shortName": "Delinea", "dateUpdated": "2024-12-24T18:31:45.418Z"}}}, "cveMetadata": {"cveId": "CVE-2024-52926", "state": "PUBLISHED", "dateUpdated": "2025-01-06T17:55:59.966Z", "dateReserved": "2024-11-18T00:00:00", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2024-11-18T00:00:00", "assignerShortName": "mitre"}, "dataVersion": "5.1"}