Description (CNA)
NIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67 allows users who lack the InET role to access the InET module via direct requests to known endpoints.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| NIH / BRICS | affected 0 through 14.0.0-67 |
CWE
CWE-425
References
- https://github.com/brics-dev/brics
- https://brics.cit.nih.gov
- https://github.com/RoseHacks/Vulnerability.Research/blob/main/CVE-2025-27581/README.md
ADP enrichment
No English description supplied.
No references supplied.