CVE-2025-25497 – Netsweeper Server Account Owner Manipulation Vulnerability

The following table lists the changes that have been made to the
CVE-2025-25497 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • New CVE Received
    by [email protected]

    Mar. 06, 2025

    Action Type Old Value New Value
    Added Description An issue in account management interface in Netsweeper Server v.8.2.6 and earlier (fixed in v.8.2.7) allows unauthorized changes to the “Account Owner” field due to client-side-only restrictions and a lack of server-side validation. This vulnerability enables account ownership reassignment to or away from any user.
    Added Reference https://helpdesk.netsweeper.com/docs/8_2_Docs/8_2_Netsweeper_Docs/Content/Release_Notes/Netsweeper_Release_Notes/8_2_Release_Notes/8_2_7_Release_and_Downloads.htm
    Added Reference https://packetstorm.news/files/id/188626/
Share the Post:

Related Posts