https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 15:09:36 +0000 https://cve.radiocsirt.org/vuln/cnvd-2024-14052 cnvd-2024-14052 https://cve.radiocsirt.org/vuln/cnvd-2024-14052 https://cve.radiocsirt.org/vuln/euvd-2026-203263 EUVD-2026-203263 https://cve.radiocsirt.org/vuln/euvd-2026-203263 https://cve.radiocsirt.org/vuln/fkie_cve-2024-25650 <p>Insecure key exchange between Delinea PAM Secret Server 11.4 and the Distributed Engine 8.4.3 allows a PAM administrator to obtain the Symmetric Key (used to encrypt RabbitMQ messages) via crafted payloads to the /pre-authenticate, /authenticate, and /execute-and-respond REST API endpoints. This makes it possible for a PAM administrator to impersonate the Engine and exfiltrate sensitive information from the messages published in the RabbitMQ exchanges, without being audited in the application.</p> <p>Insecure key exchange between Delinea PAM Secret Server 11.4 and the Distributed Engine 8.4.3 allows a PAM administrator to obtain the Symmetric Key (used to encrypt RabbitMQ messages) via crafted payloads to the /pre-authenticate, /authenticate, and /execute-and-respond REST API endpoints. This makes it possible for a PAM administrator to impersonate the Engine and exfiltrate sensitive information from the messages published in the RabbitMQ exchanges, without being audited in the application.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-25650 https://cve.radiocsirt.org/vuln/ghsa-25gj-3mw9-4cjw <p>Insecure key exchange between Delinea PAM Secret Server 11.4 and the Distributed Engine 8.4.3 allows a PAM administrator to obtain the Symmetric Key (used to encrypt RabbitMQ messages) via crafted payloads to the /pre-authenticate, /authenticate, and /execute-and-respond REST API endpoints. This makes it possible for a PAM administrator to impersonate the Engine and exfiltrate sensitive information from the messages published in the RabbitMQ exchanges, without being audited in the application.</p> <p>Insecure key exchange between Delinea PAM Secret Server 11.4 and the Distributed Engine 8.4.3 allows a PAM administrator to obtain the Symmetric Key (used to encrypt RabbitMQ messages) via crafted payloads to the /pre-authenticate, /authenticate, and /execute-and-respond REST API endpoints. This makes it possible for a PAM administrator to impersonate the Engine and exfiltrate sensitive information from the messages published in the RabbitMQ exchanges, without being audited in the application.</p> https://cve.radiocsirt.org/vuln/ghsa-25gj-3mw9-4cjw https://cve.radiocsirt.org/vuln/gsd-2024-25650 gsd-2024-25650 https://cve.radiocsirt.org/vuln/gsd-2024-25650