Threats Tagged 'cve-2025-41064'
View all threats tagged with 'cve-2025-41064'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2025-41064'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2025-41064 is a critical improper authentication vulnerability in GTT's OpenSIAC version 1.0 that allows attackers to impersonate users authenticated via the Cl@ve system. The flaw requires no authentication or user interaction and can be exploited remotely over the network, potentially compromising confidentiality, integrity, and availability of affected systems. Although no known exploits are currently in the wild, the high CVSS score of 9.3 underscores the severity of this issue. European organizations using OpenSIAC with Cl@ve authentication are at significant risk of unauthorized access and identity impersonation. Immediate mitigation steps include applying vendor patches once available, restricting network access to OpenSIAC services, and implementing additional multi-factor authentication layers. Countries with high adoption of Cl@ve and OpenSIAC, such as Spain and other EU members with integrated e-government services, are most likely to be affected. This vulnerability demands urgent attention to prevent potential large-scale identity-based attacks within European public and private sectors. Join the discussion | CVE Database V5 | 10/02/2025, 11:20:17 UTC Added: 10/02/2025, 11:25:30 UTC |
Showing 1 to 1 of 1 result