← Back

CVE-2025-54968

nvd nist
Published: Oct 27, 2025Modified: Oct 31, 2025

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

An issue was discovered in BAE SOCET GXP before 4.6.0.2. The SOCET GXP Job Service does not require authentication. In some configurations, this may allow remote users to submit jobs, or local users to submit jobs that will execute with the permissions of other users.

Affected (1)

Baesystems
1 product
Socet Gxp
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Socet Gxp
Before 4.6.0.2

Related CWEs

CWE-284
Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (2)

Source: cve@mitre.org
Product
Source: cve@mitre.org
MitigationVendor Advisory

Timeline

No history available yet.