← CVE Intelligence

CVE-2025-40897

Incorrect authorization for Threat Intelligence in Guardian/CMC before 26.0.0 PUBLISHED

Description (CNA)

An access control vulnerability was discovered in the Threat Intelligence functionality due to a specific access restriction not being properly enforced for users with view-only privileges. An authenticated user with view-only privileges for the Threat Intelligence functionality can perform administrative actions on it, altering the rules configuration, and/or affecting their availability.

Affected (CNA)

Vendor / productVersions
Nozomi Networks / Guardianaffected 0 before 26.0.0
Nozomi Networks / CMCaffected 0 before 26.0.0

CWE

CWE-863

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

siemens-SADP

No English description supplied.