PT-2026-4751 · Unknown · Access Manager

CVE-2025-59101 · Publicado 2026-01-26 · Atualizado 2026-01-26

Positive Technologies (AI Summary)

CVSS v4.0

7.7

Alta

Vetor base

AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Access Manager (affected versions not specified)

Description The system authenticates users based on their IP address rather than using standard session tokens or cookies. Once an IP address successfully logs in, it is considered authenticated for subsequent requests. This design allows for potential unauthorized access by spoofing the IP address of a logged-in user to the Access Manager web interface.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-291

Identificadores relacionados

CVE-2025-59101

Produtos afetados

Access Manager

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-59101 · Nota de Segurança
• https://r.sec-consult.com/dkaccess · Nota
• https://r.sec-consult.com/dormakaba · Nota
• https://twitter.com/CVEnew/status/2015733302993518983 · Publicação no Twitter
• https://t.me/CVEtracker/43003 · Publicação no Telegram
• https://dormakabagroup.com/en/security-advisories · Aviso do Fabricante
• https://t.me/CVEtracker/43004 · Publicação no Telegram