Beveiligingsadvies

CVE-2025-2297

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-07-28 15:40:14
Laatst bijgewerkt 2025-07-28 17:22:18
Toegewezen door BT
CVSS-score 7.2
Status PUBLISHED

Beschrijving

Prior to version 25.4.270.0, a local authenticated attacker can manipulate user profile files to add illegitimate challenge response codes into the local user registry under certain conditions. This allows users with the ability to edit their user profile files to elevate their privileges to administrator.