Vulnerability · Published Jul 29, 2024 · Assigned by Perforce
CVE-2024-6727Broken Access Control in Delphix
Medium 5.4
In plain English
A medium-severity improper access control in Data Control Tower (DCT) from Delphix. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 24% of all known vulnerabilities).
Severity (CVSS 3.1)5.4Medium
Exploit odds (30 days)0.3%top 76.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A flaw in versions of Delphix Data Control Tower (DCT) prior to 19.0.0 results in broken authentication through the enable-scale-testing functionality of the application.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Delphix | Data Control Tower (DCT) | 0.0.0 – before 19.0.0 |
Weakness: CWE-284 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L