CVE-2025-5141 | THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

Description

A binary in the BoKS Server Agent component of Fortra's Core Privileged Access Manager (BoKS) on versions 7.2.0 (up to 7.2.0.17), 8.1.0 (up to 8.1.0.22), 8.1.1 (up to 8.1.1.7), 9.0.0 (up to 9.0.0.1) and also legacy tar installs of BoKS 7.2 without hotfix #0474 on Linux, AIX, and Solaris allows low privilege local users to dump data from the cache.

Reserved 2025-05-23 | Published 2025-06-17 | Updated 2025-06-17 | Assigner Fortra

MEDIUM: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Problem types

CWE-524: Use of Cache Containing Sensitive Information

Product status

Default status

unaffected

Any version

affected

Any version

affected

Any version

affected

Any version

affected

Credits

Maciej Grabiec, ING Hubs Poland finder

References

www.cve.org/cverecord?id=CVE-2025-5141

cve.org (CVE-2025-5141)

nvd.nist.gov (CVE-2025-5141)

Download JSON

https://cve.threatint.eu/CVE/CVE-2025-5141

Support options

Helpdesk Chat, Email, Knowledgebase