This vulnerability (CVE-2025-21403) in Microsoft On-Premises Data Gateway is classified as CWE-863 (Incorrect Authorization). It allows an attacker with low privileges and requiring user interaction to potentially disclose sensitive information due to improper authorization checks. The CVSS vector indicates network attack vector, high attack complexity, low privileges required, user interaction required, unchanged scope, high confidentiality and integrity impact, and no availability impact. The vulnerability affects version 1.0.0 of the product. The vendor advisory is available but does not explicitly confirm patch status in the provided data.

Successful exploitation could lead to unauthorized disclosure of sensitive information and integrity impact within the affected system. The vulnerability does not affect availability. The attack requires network access, low privileges, and user interaction, with high attack complexity. No known active exploits have been reported.

Patch status is not yet confirmed — check the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21403 for current remediation guidance. Until official fixes are confirmed, apply any recommended workarounds or mitigations from Microsoft. Monitor the advisory for updates on patches or temporary fixes.