Security Advisory

CVE-2025-51054

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-08-06 00:00:00

Last updated 2025-08-06 20:49:33

Assigner mitre

State PUBLISHED

Description

Vedo Suite 2024.17 is vulnerable to Incorrect Access Control, which allows remote attackers to obtain a valid high privilege JWT token without prior authentication via sending an empty HTTP POST request to the /autologin/ API endpoint.

← Browse all CVEs View on cve.org ↗