Low (3.8). EPSS 0.1% chance of exploitation in the next 30 days.
The distributed engine versions 8.4.39.0 and earlier of Secret Server versions 11.7.49 and earlier can be exploited during an initial authorization event that would allow an attacker to impersonate another distributed engine.
Severity
CVSS 3.1
3.8 low
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L
EPSS
0.1% chance of exploitation in the next 30 days; higher than 4% of CVEs (scores of 2026-10-31)