Description
User enumeration can occur in the Authentication REST API in Delinea PAM Secret Server 11.4. This allows a remote attacker to determine whether a user is valid because of a difference in responses from the /oauth2/token endpoint.
Medium · 5.3
CVE-2024-25651
EUVD-2024-22967GHSA-vj7g-5fj3-rc83
User enumeration can occur in the Authentication REST API in Delinea PAM Secret Server 11.4. This allows a remote attacker to determine whe…
Published Mar 14, 2024 · Updated Aug 22, 2024 · Assigned by mitre