CVE-2025-62625CWE-269

Improper privilege management in the KVM key download component could allow an attacker to swap tokens and download sensitive keys, potentially resulting in…

Medium · published May 14, 2026

CVSS v4.0
6.0
EPSS
0%
Percentile
6.0
In the wild
Unconfirmed
What it is

Improper privilege management in the KVM key download component could allow an attacker to swap tokens and download sensitive keys, potentially resulting in unauthorized access to privileged resources and loss of confidentiality.

The record
Technical detail
CVSS v4.0
6.0 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00170 · 6.0th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2026-05-14T14:31Z
EPSS history
Timeline
  • 14 MAY 14:31Z
    Improper privilege management in the KVM key download component could allow an attacker to swap tokens and download sensitive keys, potentially resulting in…
    cvelistv5