CVE-2025-59714CWE-863

In Internet2 Grouper 5.17.1 before 5.20.5, group admins who are not Grouper sysadmins can configure loader jobs

Medium · published September 19, 2025

CVSS v3.1
6.5
EPSS
0%
Percentile
17.5
In the wild
Unconfirmed
What it is

In Internet2 Grouper 5.17.1 before 5.20.5, group admins who are not Grouper sysadmins can configure loader jobs.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00266 · 17.5th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2025-09-19T00:00Z
EPSS history
Timeline
  • 19 SEP 00:00Z
    In Internet2 Grouper 5.17.1 before 5.20.5, group admins who are not Grouper sysadmins can configure loader jobs
    cvelistv5