Privilege Manager
Monthly
Arbitrary code execution as LocalSystem is possible through the privilege manager agent in Delinea Privilege Manager builds 10.1.0 through 12.0.5796 and 13.0.0 through 13.0.1058, rooted in missing authentication for a critical function (CWE-306). The severity picture is genuinely contested: the vendor CVSS 4.0 vector scores 8.7 but requires high privileges (PR:H), active user interaction (UI:A), elevated attack complexity (AC:H) and specific attack requirements (AT:P), while our assessed CVSS 3.1 vector treats the same flaw as unauthenticated (PR:N) network-reachable with high confidentiality, integrity and availability impact. Because the exact trigger is not described in the available sources, defenders cannot yet confirm whether default deployments are exposed; no public exploit code has been identified at time of analysis and the issue is not in CISA KEV, though the vuln.today decision label places remediation in this week's work.
pmmasterd in Quest Privilege Manager before 6.0.0.061, when configured as a policy server, allows remote attackers to write to arbitrary files and consequently execute arbitrary code with root. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 23.9%.
Arbitrary code execution as LocalSystem is possible through the privilege manager agent in Delinea Privilege Manager builds 10.1.0 through 12.0.5796 and 13.0.0 through 13.0.1058, rooted in missing authentication for a critical function (CWE-306). The severity picture is genuinely contested: the vendor CVSS 4.0 vector scores 8.7 but requires high privileges (PR:H), active user interaction (UI:A), elevated attack complexity (AC:H) and specific attack requirements (AT:P), while our assessed CVSS 3.1 vector treats the same flaw as unauthenticated (PR:N) network-reachable with high confidentiality, integrity and availability impact. Because the exact trigger is not described in the available sources, defenders cannot yet confirm whether default deployments are exposed; no public exploit code has been identified at time of analysis and the issue is not in CISA KEV, though the vuln.today decision label places remediation in this week's work.
pmmasterd in Quest Privilege Manager before 6.0.0.061, when configured as a policy server, allows remote attackers to write to arbitrary files and consequently execute arbitrary code with root. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 23.9%.