Threats Tagged 'cve-2025-13532'
View all threats tagged with 'cve-2025-13532'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2025-13532'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2025-13532 is a medium-severity vulnerability in Fortra's Core Privileged Access Manager (BoKS) Server Agent 9.0 when operating in a BoKS 8.1 domain. The issue arises from insecure default configurations that allow the use of weak password hash algorithms, specifically related to yescrypt support on affected Linux platforms. This weakness can lead to the compromise of password confidentiality without requiring authentication or user interaction. The vulnerability affects Debian 11-13, RedHat 9-10, and Ubuntu 24 systems running the vulnerable BoKS versions. Although no known exploits are currently reported in the wild, the potential impact on confidentiality is significant. European organizations using these platforms and Fortra BoKS for privileged access management should prioritize patching and configuration reviews. Mitigations include enforcing stronger password hashing algorithms, auditing BoKS Server Agent configurations, and limiting exposure of affected systems. Countries with high adoption of these Linux distributions and critical infrastructure relying on Fortra PAM solutions are most at risk. Join the discussion | CVE Database V5 | 12/16/2025, 20:01:02 UTC Added: 12/16/2025, 20:09:07 UTC |
Showing 1 to 1 of 1 result