Skip to content
OpenAdvisories
Medium · 5.5 CVE-2025-5141 EUVD-2025-18557GHSA-x3hp-pwc8-rww8

Core Privileged Access Manager (BoKS) Leakage of Sensitive Data via the Cache

Published Jun 17, 2025 · Updated Aug 29, 2025 · Assigned by Fortra

Description

A binary in the BoKS Server Agent component of Fortra's Core Privileged Access Manager (BoKS) on versions 7.2.0 (up to 7.2.0.17), 8.1.0 (up to 8.1.0.22), 8.1.1 (up to 8.1.1.7), 9.0.0 (up to 9.0.0.1) and also legacy tar installs of BoKS 7.2 without hotfix #0474 on Linux, AIX, and Solaris allows low privilege local users to dump data from the cache.

Affected products

VendorProductAffectedFixed
Fortra Core Privileged Access Manager (BoKS) ≤ 7.2.0.17, ≤ 8.1.0.22, ≤ 8.1.1.7, ≤ 9.0.0.1 —

References