CVE-2025-58742CWE-522CWE-923

Insufficient Configuration Protections Enable Database Credential Interception in Milner ImageDirector Capture

High · published January 20, 2026

CVSS v4.0
8.5
EPSS
0%
Percentile
7.4
In the wild
Unconfirmed
What it is

Insufficiently Protected Credentials, Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the Connection Settings dialog in Milner ImageDirector Capture on Windows allows Adversary in the Middle (AiTM) by modifying the 'Server' field to redirect client authentication.This issue affects ImageDirector Capture: from 7.0.9 before 7.6.3.25808.

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:H/SI:H/SA:H
EPSS
0.00182 · 7.4th percentile
Weaknesses
CWE-522 · Insufficiently Protected Credentials; CWE-923 · Improper Restriction of Communication Channel to Intended Endpoints
Published
2026-01-20T21:36Z
EPSS history
Timeline
  • 20 JAN 21:36Z
    Insufficient Configuration Protections Enable Database Credential Interception in Milner ImageDirector Capture
    cvelistv5