Insufficient Configuration Protections Enable Database Credential Interception in Milner ImageDirector Capture
Vulnerability Description
Insufficiently Protected Credentials, Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the Connection Settings dialog in Milner ImageDirector Capture on Windows allows Adversary in the Middle (AiTM) by modifying the 'Server' field to redirect client authentication.This issue affects ImageDirector Capture: from 7.0.9 before 7.6.3.25808.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-58742
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Asa Reynolds (SRA)
- Rick Console (SRA)
References
More from Milner
View All →Affected Vendor
Milner
View all reports →