CVE-2025-3113 — Improper Access Control in Delphix Masking Engine

CVE-2025-3113

Improper Access Control in Delphix Masking Engine PUBLISHED

Description (CNA)

A valid, authenticated user with sufficient privileges and who is aware of Continuous Compliance’s internal database configurations can leverage the application’s built-in Connector functionality to access Continuous Compliance’s internal database. This allows the user to explore the internal database schema and export its data, including the properties of Connecters and Rule Sets.

Affected (CNA)

Vendor / product	Versions
Perforce / Delphix	affected 0 before 2025.2.0.1

CWE

CWE-284

References

https://portal.perforce.com/s/detail/a91PA000001SeefYAC

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.