Delinea Secret Server Distributed Engine Authorization Vulnerability

An authorization vulnerability has been identified in the distributed engine of Delinea Secret Server, affecting versions through 11.7.49. This vulnerability allows an attacker to impersonate another distributed engine during the initial authorization event.

Impact

Exploitation of this vulnerability could lead to unauthorized impersonation of distributed engines, potentially allowing for unauthorized actions or access within the Secret Server environment.

Reproduction

To reproduce this vulnerability, an attacker would need to initiate an authorization event with the distributed engine. This could be done by manipulating the authorization process to impersonate another engine, taking advantage of the vulnerability during the initial authorization phase.

Remediation

Users are advised to upgrade to Secret Server version 11.7.60 or later.