Back to Database
Status published
Low
CVE-2025-6942
The distributed engine versions 8.4.39.0 and earlier of Secret Server...
Vulnerability Description
The distributed engine versions 8.4.39.0 and earlier of Secret Server versions 11.7.49 and earlier can be exploited during an initial authorization event that would allow an attacker to impersonate another distributed engine.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-6942
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- NCIA researchers
References
- https://docs.delinea.com/online-help/secret-server/release-notes/ss-rn-11-7-000060.htm
- https://docs.delinea.com/online-help/secret-server/release-notes/ss-rn-11-7-000061.htm
- https://docs.delinea.com/online-help/secret-server-changelog/secret-server-change-log.htm?cshid=secret-server-changelog#Friday,_November_22,_2024
- https://trust.delinea.com/?tcuUid=2b68edca-7930-438d-b960-2d6da07cdde9
More from Delinea
View All →CVE-2025-6943
Secret Server version 11.7 and earlier is vulnerable to a...
Low
3.8
CVE-2024-5866
Arbitrary Directory Listing in Centrify PAS
Medium
5
CVE-2024-5865
Arbitrary File Reading in Centrify PAS
High
7.7
CVE-2024-52926
Delinea Privilege Manager before 12.0.2 mishandles the security of the...
Medium
6.5
CVE-2024-25652
In Delinea PAM Secret Server 11.4, it is possible for...
High
7.6
Affected Vendor
Delinea
View all reports →Affected Software
Secret Server
Vulnerable Versions:
0
Timeline
Official Publish:
July 2nd, 2025
Last Modified:
July 2nd, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L