medium5.3
CVE-2024-25651
User enumeration can occur in the Authentication REST API in Delinea PAM Secret Server 11.4.
Impact
User enumeration can occur in the Authentication REST API in Delinea PAM Secret Server 11.4. This allows a remote attacker to determine whether a user is valid because of a difference in responses from the /oauth2/token endpoint.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Delinea | Secret Server | Version 11.4.000000 |