PT-2025-37043 · Axxonsoft · Axxonone

Published 2025-09-10 · Updated 2025-10-08 · CVE-2025-10224

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions: AxxonSoft Axxon One versions 2.0.2 and earlier

Description: The LDAP authentication engine in AxxonSoft Axxon One has an improper authentication issue. A remote authenticated user may be denied access or misassigned roles due to incorrect evaluation of nested LDAP group memberships during login.

Recommendations: Update AxxonSoft Axxon One to a version later than 2.0.2.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2025-10224

Affected Products

Axxonone

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-10224 · Security Note
• https://axxonsoft.com/legal/axxonsoft-vulnerability-disclosure-policy/security-advisories · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-10224 · Vendor Advisory
• https://twitter.com/CVEnew/status/1965775029301649453 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1965789132614996175 · Twitter Post
• https://t.me/cveNotify/137796 · Telegram Post