CVE-2025-63912

Published: Mar 3, 2026Modified: May 10, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Cohesity TranZman Migration Appliance Release 4.0 Build 14614 was discovered to use a weak cryptography algorithm for data encryption, allowing attackers to trivially reverse the encyption and expose credentials.

Affected (1)

Products: Cohesity: Tranzman

Cohesity

1 product

Tranzman

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Cohesity Tranzman	Version 4.0 build14614

Related CWEs

CWE-327

Use of a Broken or Risky Cryptographic Algorithm

The product uses a broken or risky cryptographic algorithm or protocol.

References (2)

https://gist.github.com/GregDurys/4c2765d76272cda64dfc78f7a75a9251

Source: cve@mitre.org

ExploitThird Party Advisory

https://github.com/GregDurys/Cohesity-TranZman-CVEs

Source: cve@mitre.org

Third Party Advisory

Timeline

No history available yet.