Search threats, CVEs… ⌘K
Back to vendor advisories
Delinea Security AdvisoriesCVE-2025-6942

Delinea Secret Server on-prem distributed engine authentication process vulnerability - CVE-2025-6942

The distributed engine of Secret Server version 11.7.49 and earlier allows an attacker to impersonate another distributed engine by exploiting a vulnerability in an initial authorization event.

Read the vendor bulletin Get alerts for Secret Server on-prem
3.8CVSS out of 10Low severity
Scope

What the vendor says is affected

  • Delinea Secret Server on-prem version 11.7.49 and earlier ResolutionUpgrade to Secret Server version 11.7.60 or later

Versions the vendor lists as fixed

  • Upgrade to Secret Server version 11.7.60 or later
Next step

What the vendor recommends

Upgrade to Secret Server version 11.7.60 or later

Review the complete instructions on the vendor's site
Update history

What changed in later vendor updates

SecurityAlert records field-level changes from the point we begin following a bulletin. Earlier vendor changes may not have a field-by-field record.

    • The vendor changed the advisory title.
    • The vendor changed the advisory summary.
    • The vendor changed the advisory ID.
    • Severity changed from Critical to Low.
    • CVSS changed from 9.8 to 3.8.
    • Added CVEs: CVE-2025-6942.
    • Removed CVEs: CVE-2026-19117.
    • Added affected products: Delinea Secret Server on-prem version 11.7.49 and earlier ResolutionUpgrade to Secret Server version 11.7.60 or later.
    • Removed affected products: Delinea Secret Server on-prem 10.6.0 through 11.7.61 11.8.0 through 11.8.1 11.9.0 through 11.9.47 12.0.0 through 12.0.22 12.1.0 through 12.1.2 Resolution:Upgrade to secret server version 12.2.7 or later, or upgrade to....
    • Added fixed versions: Upgrade to Secret Server version 11.7.60 or later.
    • Removed fixed versions: Upgrade to secret server version 12.2.7 or later, or upgrade to one of the following hotfixes: 12.1.3, 12.0.23, 11.9.48, 11.8.2, or 11.7.62.Customers on versions prior to 11.7 should upgrade to a supported version to....
    • The vendor changed its remediation guidance.
Timeline

When this advisory changed

  1. Published by Delinea

    The publication date reported by the vendor.

  2. Added to SecurityAlert

    We collected the advisory from the official source.

  3. Confirmed at the source

    Our collector saw this advisory during a later source check.

Vulnerabilities

CVEs named in this advisory

CVE-2025-6942View CVSS, KEV, EPSS, and threat context
Keep investigating
See every advisory from this vendor