Thycotic Password Manager Secret Server suffers from a man-in-the-middle SSL certificate verification vulnerability.