Логотип exploitDog
bind:CVE-2025-10224
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-10224

Количество 2

Количество 2

nvd логотип

CVE-2025-10224

5 месяцев назад

Improper Authentication (CWE-287) in the LDAP authentication engine in AxxonSoft Axxon One (C-Werk) 2.0.2 and earlier on Windows allows a remote authenticated user to be denied access or misassigned roles via incorrect evaluation of nested LDAP group memberships during login.

CVSS3: 5.4
EPSS: Низкий
github логотип

GHSA-fhmm-mwc4-3cvj

5 месяцев назад

Improper Authentication (CWE-287) in the LDAP authentication engine in AxxonSoft Axxon One 2.0.2 and earlier on Windows allows a remote authenticated user to be denied access or misassigned roles via incorrect evaluation of nested LDAP group memberships during login.

CVSS3: 5.4
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2025-10224

Improper Authentication (CWE-287) in the LDAP authentication engine in AxxonSoft Axxon One (C-Werk) 2.0.2 and earlier on Windows allows a remote authenticated user to be denied access or misassigned roles via incorrect evaluation of nested LDAP group memberships during login.

CVSS3: 5.4
0%
Низкий
5 месяцев назад
github логотип
GHSA-fhmm-mwc4-3cvj

Improper Authentication (CWE-287) in the LDAP authentication engine in AxxonSoft Axxon One 2.0.2 and earlier on Windows allows a remote authenticated user to be denied access or misassigned roles via incorrect evaluation of nested LDAP group memberships during login.

CVSS3: 5.4
0%
Низкий
5 месяцев назад

Уязвимостей на страницу