CVE-2025-6942: fallo de gravedad baja en Delinea Secret Server
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
8Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 3.8epss 0.1%
The distributed engine versions 8.4.39.0 and earlier of Secret Server versions 11.7.49 and earlier can be exploited during an initial authorization event that would allow an attacker to impersonate another distributed engine.
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L
Productos afectados
Delinea · Secret ServerCVEs relacionadas — Delinea Secret Server
En el mismo producto, de las más peligrosas a las menos.
CVE-2024-12908MEDIUMCVE-2024-12908EPSS 0.7%CVE-2024-25652HIGHCVE-2024-25652EPSS 0.6%CVE-2023-4588MEDIUMFile accessibility vulnerability in Delinea Secret ServerEPSS 0.3%CVE-2023-4589CRITICALInsufficient verification of data authenticity vulnerability in Delinea Secret ServerEPSS 0.3%CVE-2025-6943LOWCVE-2025-6943EPSS 0.2%
Referencias
https://docs.delinea.com/online-help/secret-server-changelog/secret-server-change-log.htm?cshid=secret-server-changelog#Friday,_November_22,_2024https://docs.delinea.com/online-help/secret-server/release-notes/ss-rn-11-7-000060.htmhttps://docs.delinea.com/online-help/secret-server/release-notes/ss-rn-11-7-000061.htmhttps://trust.delinea.com/?tcuUid=2b68edca-7930-438d-b960-2d6da07cdde9