What’s Vulnerable › Vulnerabilities

CVE-2025-6942

• Severity: low (CVSS 3.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-07-02 · updated 2026-06-17
• Weakness: CWE-639

Description

The distributed engine versions 8.4.39.0 and earlier of Secret Server versions 11.7.49 and earlier can be exploited during an initial authorization event that would allow an attacker to impersonate another distributed engine.

Affected products

• Delinea Secret Server: through 11.7.49; through 8.4.39.0

References

• https://docs.delinea.com/online-help/secret-server-changelog/secret-server-change-log.htm?cshid=secret-server-changelog#Friday,_November_22,_2024
• https://docs.delinea.com/online-help/secret-server/release-notes/ss-rn-11-7-000060.htm
• https://docs.delinea.com/online-help/secret-server/release-notes/ss-rn-11-7-000061.htm
• https://trust.delinea.com/?tcuUid=2b68edca-7930-438d-b960-2d6da07cdde9

Get alerted when CVE-2025-6942 or the next vulnerability affects your stack