CVE-2025-14272

Description (CNA)

A security issue was identified in Pavilion due to improper authorization enforcement in API endpoints. This vulnerability can allow an unauthorized actor to execute privileged operations, including user/role management and other administrative actions.

Affected (CNA)

CWE

CWE-862

References

• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1777.html

ADP enrichment