Security Advisory

CVE-2025-29997

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-03-13 11:21:17
Last updated 2025-03-13 19:34:11
Assigner CERT-In
State PUBLISHED

Description

This vulnerability exists in the CAP back office application due to improper authorization checks on certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating API request URL to gain unauthorized access to other user accounts.