VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Jun 17, 2025· Updated Jun 17, 2026

CVE-2025-5141

CVE-2025-5141

Description

A binary in the BoKS Server Agent component of Fortra's Core Privileged Access Manager (BoKS) on versions 7.2.0 (up to 7.2.0.17), 8.1.0 (up to 8.1.0.22), 8.1.1 (up to 8.1.1.7), 9.0.0 (up to 9.0.0.1) and also legacy tar installs of BoKS 7.2 without hotfix #0474 on Linux, AIX, and Solaris allows low privilege local users to dump data from the cache.

Affected products

2
  • Fortra/BoKS Server Agentllm-fuzzy
    Range: 7.2.0 (up to 7.2.0.17), 8.1.0 (up to 8.1.0.22), 8.1.1 (up to 8.1.1.7), 9.0.0 (up to 9.0.0.1), legacy tar installs of BoKS 7.2 without hotfix #0474
  • Fortra/Core Privileged Access Manager (BoKS)llm-fuzzy
    Range: 7.2.0 (up to 7.2.0.17), 8.1.0 (up to 8.1.0.22), 8.1.1 (up to 8.1.1.7), 9.0.0 (up to 9.0.0.1), legacy tar installs of BoKS 7.2 without hotfix #0474

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.