Threat database

Improper Privilege Management vulnerability in Horizon Security Analyzer (formerly AlgoSec Firewall Analyzer) on Linux, 64 bit allows Privilege Escalation and Parameter Injection. A local user with access to the command line may escalate their privileges by abusing the parameters of a command that is approved in the sudoers file.  This issue affects Horizon Security Analyzer : A33.10, A33.20 and A33.30.

CVE-2025-12381 is an Improper Privilege Management vulnerability in AlgoSec Firewall Analyzer versions A33.0 (up to build 320) and A33.10 (up to build 220) on Linux 64-bit systems. It allows a local user with command line access to escalate privileges by exploiting parameters of a command approved in the sudoers file. The vulnerability requires low attack complexity but partial user interaction and some privileges to exploit. It does not affect confidentiality but can severely impact integrity and availability by allowing unauthorized privilege escalation. No known exploits are currently in the wild. European organizations using affected AlgoSec Firewall Analyzer versions should prioritize patching or mitigating this issue to prevent potential local privilege escalation attacks. The CVSS 4.0 score is 6.

Improper Limitation of a Pathname 'Path Traversal') vulnerability in Algosec Firewall Analyzer on Linux, 64 bit allows an authenticated user to upload files to a restricted directory leading to code injection. This issue affects Algosec Firewall Analyzer: A33.0 (up to build 320), A33.10 (up to build 210).

Net-NTLM leak via HTML injection in FireFlow VisualFlow workflow editor allows an attacker to obtain victim’s domain credentials and Net-NTLM hash which can lead to relay domain attacks. Fixed in A32.20 (b570 or above), A32.50 (b390 or above)