CVE-2025-5141

Core Privileged Access Manager (BoKS) Leakage of Sensitive Data via the Cache

State: Published
Severity: 5.5 Medium
Published: Jun 17, 2025
Updated: Aug 29, 2025
Reserved: May 23, 2025

Description

A binary in the BoKS Server Agent component of Fortra's Core Privileged Access Manager (BoKS) on versions 7.2.0 (up to 7.2.0.17), 8.1.0 (up to 8.1.0.22), 8.1.1 (up to 8.1.1.7), 9.0.0 (up to 9.0.0.1) and also legacy tar installs of BoKS 7.2 without hotfix #0474 on Linux, AIX, and Solaris allows low privilege local users to dump data from the cache.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N	Fortra

Weaknesses

CWE-524 Use of Cache Containing Sensitive Information

Affected Products

Product	Versions
Core Privileged Access Manager (BoKS)Fortra	7.2.0.17 and earlierAffected 8.1.0.22 and earlierAffected 8.1.1.7 and earlierAffected 9.0.0.1 and earlierAffected

References

https://www.fortra.com/security/advisories/product-security/fi-2025-008

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.