Description
An improper session validation allows an unauthenticated attacker to cause certain request notifications to be executed in the context of an incorrect user by spoofing the client IP address.
Published: 2025-01-30
Score: 5.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2025-3736 An improper session validation allows an unauthenticated attacker to cause certain request notifications to be executed in the context of an incorrect user by spoofing the client IP address.
History

Wed, 05 Feb 2025 05:30:00 +0000

Type Values Removed Values Added
References

Wed, 05 Feb 2025 05:00:00 +0000

Type Values Removed Values Added
References

Thu, 30 Jan 2025 20:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-384
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 30 Jan 2025 18:45:00 +0000

Type Values Removed Values Added
Description An improper session validation allows an unauthenticated attacker to cause certain request notifications to be executed in the context of an incorrect user by spoofing the client IP address.
References
Metrics cvssV4_0

{'score': 5.3, 'vector': 'CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N'}

Subscriptions

Broadcom Symantec Privileged Access Management
cve-icon MITRE

Status: PUBLISHED

Assigner: symantec

Published:

Updated: 2025-02-05T04:50:21.091Z

Reserved: 2025-01-22T08:29:34.304Z

Link: CVE-2025-24502

cve-icon Vulnrichment

Updated: 2025-01-30T19:22:53.204Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-01-30T19:15:14.863

Modified: 2025-02-05T05:15:11.300

Link: CVE-2025-24502

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2025-06-20T13:55:54Z

Weaknesses