CVE-2025-13532

Publication date

2025-12-16 20:01:02

Family

Fortra

State

PUBLISHED

Description

Insecure defaults in the Server Agent component of Fortras Core Privileged Access Manager (BoKS) can result in the selection of weak password hash algorithms.  This issue affects BoKS Server Agent 9.0 instances that support yescrypt and are running in a BoKS 8.1 domain.