CVE-2025-41064CWE-287

CVE-2025-41064

published October 2, 2025

CVSS
9.3
EPSS
0%
Percentile
28.0
In the wild
Unconfirmed
What it is

Incorrect authentication vulnerability in OpenSIAC, which could allow an attacker to impersonate a person using Cl@ve as an authentication method.

The record
Technical detail
CVSS
9.3 · NONE
CVSS v4.0
Not supplied
EPSS
0.00355 · 28.0th percentile
Weakness
CWE-287 · Improper Authentication
Published
2025-10-02T16:15Z
References (1)
EPSS history
Timeline
  • 02 OCT 11:20Z
    Incorrect authentication in GTT´s group OpenSIAC
    cvelistv5