CVE-2025-6942: Low severity Thycotic Secret Server vulnerability
The distributed engine versions 8.4.39.0 and earlier of Secret Server versions 11.7.49 and earlier can be exploited during an initial authorization event that would allow an attacker to impersonate another distributed engine.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6942?
CVE-2025-6942 has been rated as a high severity vulnerability due to the potential for unauthorized impersonation during the authorization process.
How do I fix CVE-2025-6942?
To address CVE-2025-6942, it is recommended to upgrade to Secret Server version 11.7.50 or later.
What impact does CVE-2025-6942 have on users?
CVE-2025-6942 potentially allows attackers to impersonate another distributed engine, leading to unauthorized access to sensitive data.
Which versions of Secret Server are affected by CVE-2025-6942?
Secret Server versions 11.7.49 and earlier are affected by CVE-2025-6942.
Is there a workaround for CVE-2025-6942?
Currently, there are no documented workarounds for CVE-2025-6942; updating to the latest version is the recommended mitigation.