PT-2025-44365 · Acquia · Acquia Dam

Brandon Goodwin + 7 · Published 2025-10-29 · Updated 2025-11-03 · CVE-2025-9954

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Acquia DAM versions 0.0.0 through 1.1.4

Description A missing authorization issue exists in Drupal Acquia DAM, allowing for forceful browsing. This allows unauthorized access to resources.

Recommendations Update Acquia DAM to version 1.1.5 or later.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-9954

DRUPAL-CONTRIB-2025-105

GHSA-X957-32V9-M7VG

Affected Products

Acquia Dam

References · 11

• https://osv.dev/vulnerability/CVE-2025-9954 · Vendor Advisory
• https://drupal.org/sa-contrib-2025-105 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-x957-32v9-m7vg · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-9954 · Security Note
• https://t.me/cveNotify/140919 · Telegram Post
• https://reddit.com/r/VulnMatter/comments/1ol36t3/resumen_diario_de_vulnerabilidades_31102025 · Reddit Post
• https://twitter.com/VulmonFeeds/status/1983694299771408712 · Twitter Post
• https://reddit.com/r/VulnMatter/comments/1onduhn/resumen_diario_de_vulnerabilidades_03112025 · Reddit Post
• https://twitter.com/CVEnew/status/1983678040358994011 · Twitter Post
• https://reddit.com/r/VulnMatter/comments/1om1lei/resumen_diario_de_vulnerabilidades_01112025 · Reddit Post
• https://t.me/CVEtracker/36146 · Telegram Post