CVE-2025-6942: falha de baixa gravidade em Delinea Secret Server
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 3.8epss 0.1%
The distributed engine versions 8.4.39.0 and earlier of Secret Server versions 11.7.49 and earlier can be exploited during an initial authorization event that would allow an attacker to impersonate another distributed engine.
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L
Produtos afetados
Delinea · Secret ServerCVEs relacionadas — Delinea Secret Server
No mesmo produto, das mais perigosas para as menos.
CVE-2024-12908MEDIUMCVE-2024-12908EPSS 0.7%CVE-2024-25652HIGHCVE-2024-25652EPSS 0.6%CVE-2023-4588MEDIUMFile accessibility vulnerability in Delinea Secret ServerEPSS 0.3%CVE-2023-4589CRITICALInsufficient verification of data authenticity vulnerability in Delinea Secret ServerEPSS 0.3%CVE-2025-6943LOWCVE-2025-6943EPSS 0.2%
Referências
https://docs.delinea.com/online-help/secret-server-changelog/secret-server-change-log.htm?cshid=secret-server-changelog#Friday,_November_22,_2024https://docs.delinea.com/online-help/secret-server/release-notes/ss-rn-11-7-000060.htmhttps://docs.delinea.com/online-help/secret-server/release-notes/ss-rn-11-7-000061.htmhttps://trust.delinea.com/?tcuUid=2b68edca-7930-438d-b960-2d6da07cdde9