CVE-2025-11906 — Privilege escalation via writable configuration files in Progress Flowmon

CVE-2025-11906

Privilege escalation via writable configuration files in Progress Flowmon PUBLISHED

Description (CNA)

A vulnerability exists in Progress Flowmon versions prior 12.5.6 where certain system configuration files have incorrect file permissions, allowing a user with access to the default flowmon system user account used for SSH access to potentially escalate privileges to root during service initialization.

Affected (CNA)

Vendor / product	Versions
Progress Software / Flowmon	affected Flowmon 12 versions prior to 12.5.6

CWE

CWE-732

References

https://community.progress.com/s/article/Progress-Flowmon-CVE-2025-11906

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.