CVE-2025-15621

Sparx Enterprise Architect Client does not verify the receiver of OAuth2 credentials during OpenID authentication PUBLISHED

Description (CNA)

Insufficiently Protected Credentials in Sparx Systems Pty Ltd. Sparx Enterprise Architect. Client does not verify the receiver of OAuth2 credentials during OpenID authentication

Affected (CNA)

Vendor / product	Versions
Sparx Systems Pty Ltd. / Sparx Enterprise Architect	affected 16.1.1627; unaffected 17.1.1714

CWE

CWE-522

References

https://sparxsystems.com/products/ea/17.1/history.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.