Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2025-5141

Core Privileged Access Manager (BoKS) Leakage of Sensitive Data via the Cache

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Fortra

Description

A binary in the BoKS Server Agent component of Fortra's Core Privileged Access Manager (BoKS) on versions 7.2.0 (up to 7.2.0.17), 8.1.0 (up to 8.1.0.22), 8.1.1 (up to 8.1.1.7), 9.0.0 (up to 9.0.0.1) and also legacy tar installs of BoKS 7.2 without hotfix #0474 on Linux, AIX, and Solaris allows low privilege local users to dump data from the cache.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Fortra Core Privileged Access Manager (BoKS)

Default version status: unaffected

  • 0 to ≤ 7.2.0.17affected
  • 0 to ≤ 8.1.0.22affected
  • 0 to ≤ 8.1.1.7affected
  • 0 to ≤ 9.0.0.1affected

References