Back to vendor advisories
Delinea Security AdvisoriesCVE-2025-6942

Delinea Secret Server on-prem distributed engine authentication process vulnerability - CVE-2025-6942

The distributed engine of Secret Server version 11.7.49 and earlier allows an attacker to impersonate another distributed engine by exploiting a vulnerability in an initial authorization event.

3.8CVSS out of 10Low severity
Scope

What the vendor says is affected

  • Delinea Secret Server on-prem version 11.7.49 and earlier ResolutionUpgrade to Secret Server version 11.7.60 or later

Versions the vendor lists as fixed

  • Upgrade to Secret Server version 11.7.60 or later
Next step

What the vendor recommends

Upgrade to Secret Server version 11.7.60 or later

Review the complete instructions on the vendor's site
Timeline

When this advisory changed

  1. Published by Delinea

    The publication date reported by the vendor.

  2. Added to SecurityAlert

    We collected the advisory from the official source.

  3. Confirmed at the source

    Our collector saw this advisory during a later source check.

Vulnerabilities

CVEs named in this advisory