CVE-2025-10224 in AxxonOne
要約
〜によって VulDB • 2026年06月18日
Improper Authentication (CWE-287) in the LDAP authentication engine in AxxonSoft Axxon One 2.0.2 and earlier on Windows allows a remote authenticated user to be denied access or misassigned roles via incorrect evaluation of nested LDAP group memberships during login.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.