VULNERABILITY INTELLIGENCE
CVE-2025-12508
CVSS score8.4 HIGH
EPSS probability0.20%
CISA KEVNot currently listed
Published2025-10-31
Last modified2026-10-07
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
Description
When using domain users as BRAIN2 users, communication with Active Directory services is unencrypted. This can lead to the interception of authentication data and compromise confidentiality.
Weakness classification
- 0beee27a-7d8c-424f-8e46-ac453fa147e6: CWE-319