CVE-2025-58742

Insufficient Configuration Protections Enable Database Credential Interception in Milner ImageDirector Capture

State: Published
Severity: 8.5 High
Published: Jan 20, 2026
Updated: Jan 21, 2026
Reserved: Sep 4, 2025

Description

Insufficiently Protected Credentials, Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the Connection Settings dialog in Milner ImageDirector Capture on Windows allows Adversary in the Middle (AiTM) by modifying the 'Server' field to redirect client authentication.This issue affects ImageDirector Capture: from 7.0.9 before 7.6.3.25808.

Scores

CVSS	Score	Vector	Source
4.0	8.5 High	CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:H/SI:H/SA:H	SRA

Weaknesses

CWE-522 Insufficiently Protected Credentials
CWE-923 Improper Restriction of Communication Channel to Intended Endpoints

Affected Products

Product	Versions
ImageDirector CaptureMilner	7.0.9 to before 7.6.3.25808Affected

References

https://sra.io/advisoriesthird-party-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.