CVE-2025-6180

The StrongDM Client insufficiently protected a pre-authentication token. Attackers could exploit this to intercept and reuse the token, potentially redeeming valid authentication credentials through a race condition.

Score

CVSS 4.0 8.5 High

Status

Deferred - ebf2cdfb-f390-4894-8ec9-f81bf1c57e6b

Published

2025-08-20

Last modified

2025-08-20

Weaknesses

CWE-319

Affected products

• Sdm-cli (Strongdm)

References

• https://security.strongdm.com/?tcuUid=56fde839-9388-4361-8d3b-9baa7b2de2ed