CVE-2025-6943: falha de baixa gravidade em Delinea Secret Server
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 3.8epss 0.2%
Secret Server version 11.7 and earlier is vulnerable to a SQL report creation vulnerability that allows an administrator to gain access to restricted tables.
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L
Produtos afetados
Delinea · Secret ServerCVEs relacionadas — Delinea Secret Server
No mesmo produto, das mais perigosas para as menos.
CVE-2024-12908MEDIUMCVE-2024-12908EPSS 0.7%CVE-2024-25652HIGHCVE-2024-25652EPSS 0.6%CVE-2023-4588MEDIUMFile accessibility vulnerability in Delinea Secret ServerEPSS 0.3%CVE-2023-4589CRITICALInsufficient verification of data authenticity vulnerability in Delinea Secret ServerEPSS 0.3%CVE-2025-6942LOWCVE-2025-6942EPSS 0.1%
Referências
https://docs.delinea.com/online-help/secret-server-changelog/secret-server-change-log.htm?cshid=secret-server-changelog#Friday,_November_22,_2024https://docs.delinea.com/online-help/secret-server/release-notes/ss-rn-11-7-000060.htmhttps://docs.delinea.com/online-help/secret-server/release-notes/ss-rn-11-7-000061.htmhttps://trust.delinea.com