CVEvulnerability

CVE-2025-13532

6.2 MEDIUM Published 2025-12-16 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2025-12-16
Last modified
2026-06-17
Assigner
df4dee71-de3a-4139-9588-11b62fe6c0ff
CVSS 3.1 (df4dee71-de3a-4139-9588-11b62fe6c0ff)
6.2 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-916

Description

Insecure defaults in the Server Agent component of Fortra's Core Privileged Access Manager (BoKS) can result in the selection of weak password hash algorithms.  This issue affects BoKS Server Agent 9.0 instances that support yescrypt and are running in a BoKS 8.1 domain.

Related

Weakness · CWE (1)

  • CWE-916 Use of Password Hash With Insufficient Computational Effort weakness

References