PT-2025-34753 · Cmc · Cmc

Published 2025-08-26 · Updated 2025-08-26 · CVE-2025-1501

Positive Technologies · (AI Summary)

CVSS v3.1

4.3

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions:

CMC versions prior to 25.1.0

Description:

An access control issue was identified in the Request Trace and Download Trace functionalities. Improper access restrictions allow authenticated users with limited privileges to request and download trace files, potentially exposing unauthorized network data.

Recommendations:

Update to version 25.1.0 or later.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2025-1501

Affected Products

Cmc

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-1501 · Security Note
• https://twitter.com/CVEnew/status/1960294706119942298 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1960314890599502245 · Twitter Post
• https://security.nozominetworks.com/NN-2025:3-01 · Note