Beveiligingsadvies

CVE-2025-40897

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-15 08:18:05
Laatst bijgewerkt 2026-08-11 12:22:54
Toegewezen door Nozomi
CVSS-score 8.1
Status PUBLISHED

Beschrijving

An access control vulnerability was discovered in the Threat Intelligence functionality due to a specific access restriction not being properly enforced for users with view-only privileges. An authenticated user with view-only privileges for the Threat Intelligence functionality can perform administrative actions on it, altering the rules configuration, and/or affecting their availability.