Delinea Secret Server up to 11.7.48 Distributed Engine authorization

Summaryinfo

A vulnerability was found in Delinea Secret Server up to 11.7.48 and classified as problematic. The impacted element is an unknown function of the component Distributed Engine. The manipulation results in authorization. This vulnerability is known as CVE-2025-6942. Attacking locally is a requirement. No exploit is available. It is suggested to upgrade the affected component.

Detailsinfo

A vulnerability classified as problematic has been found in Delinea Secret Server up to 11.7.48. Affected is an unknown code of the component Distributed Engine. The manipulation with an unknown input leads to a authorization vulnerability. CWE is classifying the issue as CWE-639. The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

The distributed engine of Secret Server versions 11.7.49 and earlier can be exploited during an initial authorization event that would allow an attacker to impersonate another distributed engine.

The advisory is shared for download at docs.delinea.com. This vulnerability is traded as CVE-2025-6942 since 07/01/2025. The exploitability is told to be difficult. The attack needs to be approached locally. The exploitation requires an enhanced level of successful authentication. There are neither technical details nor an exploit publicly available.

Upgrading to version 11.7.49 eliminates this vulnerability. The upgrade is hosted for download at docs.delinea.com.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2025-19743). VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Vendor

• Delinea

Name

• Secret Server

Version

• 11.7.0
• 11.7.1
• 11.7.2
• 11.7.3
• 11.7.4
• 11.7.5
• 11.7.6
• 11.7.7
• 11.7.8
• 11.7.9
• 11.7.10
• 11.7.11
• 11.7.12
• 11.7.13
• 11.7.14
• 11.7.15
• 11.7.16
• 11.7.17
• 11.7.18
• 11.7.19
• 11.7.20
• 11.7.21
• 11.7.22
• 11.7.23
• 11.7.24
• 11.7.25
• 11.7.26
• 11.7.27
• 11.7.28
• 11.7.29
• 11.7.30
• 11.7.31
• 11.7.32
• 11.7.33
• 11.7.34
• 11.7.35
• 11.7.36
• 11.7.37
• 11.7.38
• 11.7.39
• 11.7.40
• 11.7.41
• 11.7.42
• 11.7.43
• 11.7.44
• 11.7.45
• 11.7.46
• 11.7.47
• 11.7.48

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion