CVE-2025-59714

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-59714

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.2 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

I

n Internet2 Grouper 5.17.1 before 5.20.5, group admins who are not Grouper sysadmins can configure loader jobs.

References
Link Resource
https://spaces.at.internet2.edu/display/Grouper/Grouper+bug+-+GRP-6311+-+non-Grouper-admins+can+configure+loader+jobs Vendor Advisory
https://spaces.at.internet2.edu/display/Grouper/Grouper+bug+-+GRP-6311+-+non-Grouper-admins+can+configure+loader+jobs Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:internet2:grouper:*:*:*:*:*:*:*:*
History

08 Oct 2025, 16:24

Type Values Removed Values Added
References () https://spaces.at.internet2.edu/display/Grouper/Grouper+bug+-+GRP-6311+-+non-Grouper-admins+can+configure+loader+jobs - () https://spaces.at.internet2.edu/display/Grouper/Grouper+bug+-+GRP-6311+-+non-Grouper-admins+can+configure+loader+jobs - Vendor Advisory
CPE cpe:2.3:a:internet2:grouper:*:*:*:*:*:*:*:*
First Time Internet2 grouper
Internet2

19 Sep 2025, 16:00

Type Values Removed Values Added
New CVE
Information

Published : 2025-09-19 03:15

Updated : 2025-10-08 16:24

NVD link : CVE-2025-59714

Mitre link : CVE-2025-59714

CVE.ORG link : CVE-2025-59714

JSON object : View

Products Affected

internet2

CWE
CWE-863

Incorrect Authorization