Not Simon<p><strong>Security Week</strong> reports that the Delinea security incident from Friday 12 April 2024 stemmed from a failed responsible disclosure attempt. Technical details of an authentication bypass vulnerability in the Secret Server SOAP API along with proof-of-concept (PoC) code were made public that day. The vulnerability has not been assigned a CVE ID. 🔗 <a href="https://www.securityweek.com/delinea-scrambles-to-patch-critical-flaw-after-failed-responsible-disclosure-attempt/" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://www.</span><span class="ellipsis">securityweek.com/delinea-scram</span><span class="invisible">bles-to-patch-critical-flaw-after-failed-responsible-disclosure-attempt/</span></a></p><p><a href="https://infosec.exchange/tags/Delinea" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Delinea</span></a> <a href="https://infosec.exchange/tags/vulnerability" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>vulnerability</span></a> <a href="https://infosec.exchange/tags/SecretServer" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>SecretServer</span></a></p>