CVE-2025-3113 — Improper Access Control in Delphix Masking Engine
A valid, authenticated user with sufficient privileges and who is aware of Continuous Compliance’s internal database configurations can leverage the application’s built-in Conne…
Published: 2025-04-17 · CVSS: 9.0 · CVSS 4.0
A valid, authenticated user with sufficient privileges and who is aware of Continuous Compliance’s internal database configurations can leverage the application’s built-in Connector functionality to access Continuous Compliance’s internal database. This allows the user to explore the internal database schema and export its data, including the properties of Connecters and Rule Sets.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7