An attacker can use a valid SAML IdP response that meets certain conditions to impersonate another user within Delinea Secret Server, allowing access to the impersonated user’s secrets and privileges and effectively bypassing normal authentication controls. The vulnerability is classified under CWE-290, Authentication Bypass.

Delinea Secret Server (On-Prem) is the affected product. No specific version numbers are listed as vulnerable, but the advisory recommends upgrading to version 12.2.7 or later.

The vulnerability has a CVSS score of 9.5, indicating critical severity, but its EPSS score is less than 1%, suggesting a very low probability of exploitation at present. It is not listed in the CISA KEV catalog SAML IdP response; an such responses could impersonate legitimate users and access sensitive data. The exploitation requires the target to use SAML for authentication and depends on specific IdP response conditions described in the advisory.