CVE-2025-6943

Published: Jul 2, 2025Modified: Jun 17, 2026

4.0

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L

Exploitability: 0.6 / Impact: 3.4

Source: NVD

Description

Secret Server version 11.7 and earlier is vulnerable to a SQL report creation vulnerability that allows an administrator to gain access to restricted tables.

Affected (1)

Products: Delinea: Secret Server

Delinea

1 product

Secret Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Delinea Secret Server	Before 11.7.000060

Related CWEs

CWE-269

Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (4)

https://docs.delinea.com/online-help/secret-server-changelog/secret-server-change-log.htm?cshid=secret-server-changelog#Friday,_November_22,_2024

Source: 1443cd92-d354-46d2-9290-d812316ca43a

Release Notes

https://docs.delinea.com/online-help/secret-server/release-notes/ss-rn-11-7-000060.htm

Source: 1443cd92-d354-46d2-9290-d812316ca43a

Release Notes

https://docs.delinea.com/online-help/secret-server/release-notes/ss-rn-11-7-000061.htm

Source: 1443cd92-d354-46d2-9290-d812316ca43a

Release Notes

https://trust.delinea.com

Source: 1443cd92-d354-46d2-9290-d812316ca43a

Vendor Advisory

Timeline

No history available yet.