PT-2025-44375 · Progress · Flowmon

Published 2025-10-30 · Updated 2025-10-30 · CVE-2025-11906

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Progress Flowmon versions prior to 12.5.6

Description A flaw exists in Progress Flowmon where system configuration files have incorrect file permissions. A user with access to the default flowmon system user account used for SSH access could potentially escalate privileges to root during service initialization.

Recommendations Update Progress Flowmon to version 12.5.6 or later.

Fix

LPE

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2025-11906

Affected Products

Flowmon

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-11906 · Security Note
• https://community.progress.com/s/article/Progress-Flowmon-CVE-2025-11906 · Vendor Advisory
• https://twitter.com/CVEnew/status/1983803688993911186 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1983830036672090263 · Twitter Post
• https://t.me/cveNotify/140931 · Telegram Post