CVE-2023-4589 - CVE House
Back to Database
Status published Critical CVE-2023-4589

Insufficient verification of data authenticity vulnerability in Delinea Secret Server

Vulnerability Description

Insufficient verification of data authenticity vulnerability in Delinea Secret Server, in its v10.9.000002 version. An attacker with an administrator account could perform software updates without proper integrity verification mechanisms. In this scenario, the update process lacks digital signatures and fails to validate the integrity of the update package, allowing the attacker to inject malicious applications during the update.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-4589

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Héctor de Armas Padrón (@3v4SI0N)

References

More from Delinea

View All →
CVE-2025-6943
Secret Server version 11.7 and earlier is vulnerable to a...
Low 3.8
CVE-2025-6942
The distributed engine versions 8.4.39.0 and earlier of Secret Server...
Low 3.8
CVE-2024-5866
Arbitrary Directory Listing in Centrify PAS
Medium 5
CVE-2024-5865
Arbitrary File Reading in Centrify PAS
High 7.7
CVE-2024-52926
Delinea Privilege Manager before 12.0.2 mishandles the security of the...
Medium 6.5

Affected Vendor

Affected Software

Secret Server
Vulnerable Versions:
v10.9.000002

Timeline

Official Publish: September 6th, 2023
Last Modified: September 26th, 2024
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Weaknesses (CWE)

CWE-345

MITRE ATT&CK TTPs

T1557 Adversary-in-the-Middle
Credential Access
T1071 Application Layer Protocol
Command and Control
T1552 Unsecured Credentials
Credential Access
T1190 Exploit Public-Facing Application
Initial Access
T1041 Exfiltration Over C2 Channel
Exfiltration