Skip to content
CVE PROGRAM SOURCE RECORD6.2 Medium

CVE-2025-13532

Weak Password Hash in Core Privileged Access Manager (BoKS)

Description

Insecure defaults in the Server Agent component of Fortra's Core Privileged Access Manager (BoKS) can result in the selection of weak password hash algorithms.  This issue affects BoKS Server Agent 9.0 instances that support yescrypt and are running in a BoKS 8.1 domain.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Fortra Core Privileged Access Manager (BoKS)

Default version status: unaffected

  • This issue affects BoKS Server Agent 9.0 instances that support yescrypt and are running in a BoKS 8.1 domain. The affected platforms are: Debian 11, 12, 13, RedHat 9, 10 and Ubuntu 24.affected

References