PT-2025-17940 · Netscout · Ngeniusone

Jorge Escabias · Published 2025-04-25 · Updated 2025-05-27 · CVE-2025-32982

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions NETSCOUT nGeniusONE versions prior to 6.4.0 b2350

Description The issue is related to a Broken Authorization Schema for the report module. This means that there is a flaw in how authorization is handled, potentially allowing unauthorized access to certain features or data within the report module.

Recommendations For versions prior to 6.4.0 b2350, update to version 6.4.0 b2350 or later to resolve the issue. As a temporary workaround, consider restricting access to the report module to minimize the risk of exploitation.

Fix

Improper Authorization

Weakness Enumeration

CWE-285

Related Identifiers

CVE-2025-32982

Affected Products

Ngeniusone

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-32982 · Security Note
• https://osv.dev/vulnerability/CVE-2025-32982 · Vendor Advisory
• https://netscout.com/securityadvisories · Vendor Advisory
• https://twitter.com/CVEnew/status/1915877099673686288 · Twitter Post
• https://twitter.com/dailycve/status/1927427363538653214 · Twitter Post
• https://t.me/cvedetector/23782 · Telegram Post
• https://t.me/cvetracker/22400 · Telegram Post