CVE-2025-22956

n/a / n/a PUBLISHED

Description (CNA)

OPSI before 4.3 allows any client to retrieve any ProductPropertyState, including those of other clients. This can lead to privilege escalation if any ProductPropertyState contains a secret only intended to be accessible by a subset of clients. One example of this is a domain join account password for the windomain package.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://opsi.org/en/product/releases/#4.3-20250129054911

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.