Delphix PII Leak Vulnerability Due to Improper EOR Character Handling
Vulnerability
A vulnerability has been identified in Delphix Continuous Compliance versions 2025.3.0 and above, allowing for a leak of personally identifiable information (PII). This issue arises from a recent bug fix that aimed to properly manage CR+LF End-of-Record (EOR) characters in delimited files. When an incorrect EOR configuration is used, it can lead to inaccurate data parsing, leaving PII unmasked and exposed.
Impact
The vulnerability can result in the unintentional exposure of unmasked PII, allowing unauthorized access to sensitive personal data.
Remediation
Users should verify that their EOR configuration matches the file format and review masking job reports for expected row counts. If discrepancies are found, reconfigure the masking jobs accordingly.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.