Description

The StrongDM Client insufficiently protected a pre-authentication token. Attackers could exploit this to intercept and reuse the token, potentially redeeming valid authentication credentials through a race condition.

INFO

Published Date :

2025-08-20T16:41:25.007Z

Last Modified :

2025-08-20T18:48:02.726Z

Source :

StrongDM
AFFECTED PRODUCTS

The following products are affected by CVE-2025-6180 vulnerability.

Vendors Products
Strongdm
  • Sdm-cli
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-6180.

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Attack Requirements
Privileges Required
User Interaction
VS Confidentiality
VS Integrity
VS Availability
SS Confidentiality
SS Integrity
SS Availability