CVE-2025-6943
3.8
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L
Summary
Secret Server version 11.7 and earlier is vulnerable to a SQL report creation vulnerability that allows an administrator to gain access to restricted tables.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Delinea | Secret Server | 0 <= 11.7 | affected |
Weaknesses
- CWE-269: CWE-269 Improper Privilege Management
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
References
- https://docs.delinea.com/online-help/secret-server/release-notes/ss-rn-11-7-000060.htm
- https://docs.delinea.com/online-help/secret-server/release-notes/ss-rn-11-7-000061.htm
- https://docs.delinea.com/online-help/secret-server-changelog/secret-server-change-log.htm?cshid=secret-server-changelog#Friday,_November_22,_2024
- https://trust.delinea.com
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.