Vulnerability details
CVE-2025-6737
Securden Unified PAM
Securden Unified PAM Shared SSH Key and Cloud Infrastructure
CVSS 3.1
7.2High
Official description
Securden’s Unified PAM Remote Vendor Gateway access portal shares infrastructure and access tokens across multiple tenants. A malicious actor can obtain authentication material and access the gateway server with low-privilege permissions.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 7.2High | 3.1 | CVEProject cvelistV5 (CNA) (rapid7) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Securden | Unified PAM | 9.0.* ≤ v < 11.3.1 | CVEProject cvelistV5 (CNA) |
References and advisories
1
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2025-08-25
- Last updated
- 2025-08-26
- State
- Published
- Assigner (CNA)
- rapid7
Exploit prediction (EPSS)
0.27%
Probability of exploitation in 30 days
19.6%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- None
- Technical impact
- Partial
Weaknesses (CWE)
- CWE-1391Use of Weak Credentials