VULNERABILITY INTELLIGENCE

CVE-2025-54970

CVSS score6.5 MEDIUM
EPSS probability0.25%
CISA KEVNot currently listed
Published2025-10-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

An issue was discovered in BAE SOCET GXP before 4.6.0.2. The SOCET GXP Job Status Service fails to authenticate requests. In some configurations, this may allow remote or local users to abort jobs or read information without the permissions of the job owner.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-284

Primary references