Beveiligingsadvies
CVE-2025-4692
CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations
Beschrijving
Actors can use a maliciously crafted JavaScript object notation (JSON) web token (JWT) to perform privilege escalation by submitting the malicious JWT to a vulnerable method exposed on the cloud platform. If the exploit is successful, the user can escalate privileges to access any device managed by the ABUP Cloud Update Platform.