Skip to content
OpenAdvisories
High · 8.5 CVE-2025-58742 EUVD-2025-206309GHSA-9v9c-vvj8-53qg

Insufficient Configuration Protections Enable Database Credential Interception in Milner ImageDirector Capture

Published Jan 20, 2026 · Updated Jan 21, 2026 · Assigned by SRA

Description

Insufficiently Protected Credentials, Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the Connection Settings dialog in Milner ImageDirector Capture on Windows allows Adversary in the Middle (AiTM) by modifying the 'Server' field to redirect client authentication.This issue affects ImageDirector Capture: from 7.0.9 before 7.6.3.25808.

Affected products

VendorProductAffectedFixed
Milner ImageDirector Capture 7.0.9 – < 7.6.3.25808 7.6.3.25808

References