CVE-2025-6083CWE-287

ExtremeCloud Universal ZTNA Improper Authorization

Medium · published June 13, 2025

CVSS v4.0
5.2
EPSS
0%
Percentile
14.8
In the wild
Unconfirmed
What it is

In ExtremeCloud Universal ZTNA, a syntax error in the 'searchKeyword' condition caused queries to bypass the owner_id filter. This issue may allow users to search data across the entire table instead of being restricted to their specific owner_id.

The record
Technical detail
CVSS v4.0
5.2 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:L/VI:N/VA:N/SC:H/SI:H/SA:H/S:N
EPSS
0.00245 · 14.8th percentile
Weakness
CWE-287 · Improper Authentication
Published
2025-06-13T21:06Z
EPSS history
Timeline
  • 13 JUN 21:06Z
    ExtremeCloud Universal ZTNA Improper Authorization
    cvelistv5