← CVE Intelligence

CVE-2025-6180

Authentication Hijack PUBLISHED

Description (CNA)

The StrongDM Client insufficiently protected a pre-authentication token. Attackers could exploit this to intercept and reuse the token, potentially redeeming valid authentication credentials through a race condition.

Affected (CNA)

Vendor / productVersions
StrongDM / sdm-cliaffected 0 through 47.96.0

CWE

CWE-319

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.