This vulnerability involves an authentication bypass via spoofing in Delinea Secret Server (On-Prem). Specifically, under certain conditions, a valid SAML IdP response can be used to impersonate another user within the Secret Server environment. The vulnerability affects versions from 10.5.0 up to and including 12.1.3. The CVSS 4.0 base score is 9.5, indicating a critical severity with network attack vector, high complexity, and no privileges or user interaction required. There are no known exploits in the wild and no vendor advisory or patch links provided in the input data.

Successful exploitation allows an attacker to bypass authentication and impersonate any Secret Server user, potentially gaining unauthorized access to sensitive secrets and credentials managed by the product. This could lead to significant compromise of privileged accounts and sensitive infrastructure.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor Delinea's advisories for updates. Until a fix is available, consider restricting access to the affected versions and reviewing SAML IdP configurations to mitigate risk.