CVE-2025-10224 — Incorrect Evaluation of LDAP Nested Groups during Login in AxxonSoft Axxon One (C-Werk)

CVE-2025-10224

Incorrect Evaluation of LDAP Nested Groups during Login in AxxonSoft Axxon One (C-Werk) PUBLISHED

Description (CNA)

Improper Authentication (CWE-287) in the LDAP authentication engine in AxxonSoft Axxon One (C-Werk) 2.0.2 and earlier on Windows allows a remote authenticated user to be denied access or misassigned roles via incorrect evaluation of nested LDAP group memberships during login.

Affected (CNA)

Vendor / product	Versions
AxxonSoft / AxxonOne C-Werk	affected 0 through 2.0.2

CWE

CWE-287

References

https://www.axxonsoft.com/legal/axxonsoft-vulnerability-disclosure-policy/security-advisories

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.