VULNERABILITY INTELLIGENCE

CVE-2025-6942

CVSS score3.8 LOW
EPSS probability0.15%
CISA KEVNot currently listed
Published2025-07-02
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L

Description

The distributed engine versions 8.4.39.0 and earlier of Secret Server versions 11.7.49 and earlier can be exploited during an initial authorization event that would allow an attacker to impersonate another distributed engine.

Weakness classification

  • 1443cd92-d354-46d2-9290-d812316ca43a: CWE-639

Primary references