CVE-2025-8660

Privilege Escalation in Symantec PGP Encryption 11.0.1

Medium · published August 11, 2025

CVSS v4.0
5.6
EPSS
0%
Percentile
22.1
In the wild
Unconfirmed
What it is

⚠️ A sneaky privilege escalation flaw lets users access resources they shouldn't! Imagine someone getting into a VIP lounge without a wristband. 🎟️ This vulnerability is like a backstage pass that was accidentally left behind the counter, allowing an unauthorized user to access areas meant only for the management. If someone figures it out, they could leverage it to take control of sensitive functions they normally can't touch. If exploited, it could empower unauthorized users to access privileges beyond their role, potentially leading to data leaks or unauthorized actions within the system. While it hasn't been widely exploited, the risk is there, and you definitely want to keep things locked down!

Put simply

This vulnerability is like a backstage pass that was accidentally left behind the counter, allowing an unauthorized user to access areas meant only for the management. If someone figures it out, they could leverage it to take control of sensitive functions they normally can't touch. This vulnerability allows users to gain elevated permissions, enabling them to access functions or data that should be restricted based on their credentials.

What to do

If exploited, it could empower unauthorized users to access privileges beyond their role, potentially leading to data leaks or unauthorized actions within the system. While it hasn't been widely exploited, the risk is there, and you definitely want to keep things locked down! To mitigate this risk, review your permission settings and ensure strict access controls are in place. Regularly audit user roles and permissions to eliminate unnecessary privileges. It's also a good idea to update your software to the latest version as soon as a patch becomes available. You've got this! With a little diligence, you'll keep the system locked tight! 🛡️

The record
Technical detail
CVSS v4.0
5.6 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS
0.00305 · 22.1th percentile
Published
2025-08-11T07:18Z
EPSS history
Timeline
  • 11 AUG 07:18Z
    Privilege Escalation in Symantec PGP Encryption 11.0.1
    cvelistv5