CVE-2025-1003CWE-273

HP Anyware Agent for Linux – Potential Authentication Bypass

High · published February 3, 2025

CVSS v4.0
8.5
EPSS
0%
Percentile
14.7
In the wild
Unconfirmed
What it is

A potential vulnerability has been identified in HP Anyware Agent for Linux which might allow for authentication bypass which may result in escalation of privilege. HP is releasing a software update to mitigate this potential vulnerability.

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS
0.00244 · 14.7th percentile
Weakness
CWE-273 · Improper Check for Dropped Privileges
Published
2025-02-03T23:56Z
EPSS history
Timeline
  • 03 FEB 23:56Z
    HP Anyware Agent for Linux – Potential Authentication Bypass
    cvelistv5