CVE-2025-58742 — Insufficient Configuration Protections Enable Database Credential Interception in Milner ImageDirector Capture

CVE-2025-58742

Insufficient Configuration Protections Enable Database Credential Interception in Milner ImageDirector Capture PUBLISHED

Description (CNA)

Insufficiently Protected Credentials, Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the Connection Settings dialog in Milner ImageDirector Capture on Windows allows Adversary in the Middle (AiTM) by modifying the 'Server' field to redirect client authentication.This issue affects ImageDirector Capture: from 7.0.9 before 7.6.3.25808.

Affected (CNA)

Vendor / product	Versions
Milner / ImageDirector Capture	affected 7.0.9 before 7.6.3.25808

CWE

CWE-522, CWE-923

References

https://sra.io/advisories

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.