by Kastro
Paper/Archive/CVE-2025-3113

CVE-2025-3113

Perforce Delphix — Improper Access Control in Delphix Masking Engine

EPSS 0.3%CVSS 9.0
critical.is priorityof 100
32
CVSS 9.0 (CNA)9.0 / 10 × 3027.0Not in CISA KEV+300.0EPSS percentile 27.0.270 × 205.4No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A valid, authenticated user with sufficient privileges and who is aware of Continuous Compliance’s internal database configurations can leverage the application’s built-in Connector functionality to access Continuous Compliance’s internal database. This allows the user to explore the internal database schema and export its data, including the properties of Connecters and Rule Sets.

Affected

ProductAffectedFixed inSource
Delphix< 2025.2.0.12025.2.0.1CNA

Scores by source

Perforce (CNA)9.0CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refportal.perforce.com/s/detail/a91PA000001SeefYAC