Filtered by vendor Strongdm Subscriptions
Filtered by product Sdm-cli Subscriptions
Total 4 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-6180 1 Strongdm 1 Sdm-cli 2025-08-21 N/A
The StrongDM Client insufficiently protected a pre-authentication token. Attackers could exploit this to intercept and reuse the token, potentially redeeming valid authentication credentials through a race condition.
CVE-2025-6183 2 Apple, Strongdm 2 Macos, Sdm-cli 2025-08-21 N/A
The StrongDM macOS client incorrectly processed JSON-formatted messages. Attackers could potentially modify macOS system configuration by crafting a malicious JSON message.
CVE-2025-6182 2 Microsoft, Strongdm 2 Windows, Sdm-cli 2025-08-21 N/A
The StrongDM Windows service incorrectly handled communication related to system certificate management. Attackers could exploit this behavior to install untrusted root certificates or remove trusted ones.
CVE-2025-6181 2 Microsoft, Strongdm 2 Windows, Sdm-cli 2025-08-21 N/A
The StrongDM Windows service incorrectly handled input validation. Authenticated attackers could potentially exploit this leading to privilege escalation.