← Back

CVE-2025-12508

nvd nist
Published: Oct 31, 2025Modified: Jun 17, 2026Deferred

JSON object

Loading...
8.4
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
Exploitability: 1.7 / Impact: 6.0
Source: 0beee27a-7d8c-424f-8e46-ac453fa147e6 (Secondary)

Description

When using domain users as BRAIN2 users, communication with Active Directory services is unencrypted. This can lead to the interception of authentication data and compromise confidentiality.

Related CWEs

CWE-319
Cleartext Transmission of Sensitive Information
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

References (1)

Source: 0beee27a-7d8c-424f-8e46-ac453fa147e6

Timeline

No history available yet.