Security Advisory

CVE-2025-25497

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-03-06 00:00:00

Last updated 2025-03-07 19:45:40

Assigner mitre

State PUBLISHED

Description

An issue in account management interface in Netsweeper Server v.8.2.6 and earlier (fixed in v.8.2.7) allows unauthorized changes to the "Account Owner" field due to client-side-only restrictions and a lack of server-side validation. This vulnerability enables account ownership reassignment to or away from any user.

← Browse all CVEs View on cve.org ↗