PT-2025-32280 · Netwrix+1 · Netwrix Directory Manager+1

Published 2025-08-07 · Updated 2025-08-11 · CVE-2025-54394

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Netwrix Directory Manager versions 11.0.0.0 through 11.1.25162.01

Description Netwrix Directory Manager (formerly Imanami GroupID) is susceptible to insufficient protection of credentials when processing requests for remote Excel resources.

Recommendations Update Netwrix Directory Manager to version 11.1.25162.02 or later.

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2025-54394

Affected Products

Groupid

Netwrix Directory Manager

References · 6

• https://community.netwrix.com/t/adv-2025-015-critical-vulnerabilities-in-netwrix-directory-manager-formerly-imanami-groupid-v11/17192 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-54394 · Security Note
• https://osv.dev/vulnerability/CVE-2025-54394 · Vendor Advisory
• https://t.me/CVEtracker/29432 · Telegram Post
• https://twitter.com/dailycve/status/1954938754575044990 · Twitter Post
• https://twitter.com/CVEnew/status/1953506245450543324 · Twitter Post