by Kastro
Paper/Archive/CVE-2025-54603

CVE-2025-54603

mitre — An incorrect OIDC authentication flow in Claroty Secure Access 3.3.0 through 4.0.2 can result in unauthorized user creation or impersonat…

EPSS 0.7%CVSS 9.0
critical.is priorityof 100
38
CVSS 9.0 (ADP)9.0 / 10 × 3027.0Not in CISA KEV+300.0EPSS percentile 55.0.550 × 2011.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

An incorrect OIDC authentication flow in Claroty Secure Access 3.3.0 through 4.0.2 can result in unauthorized user creation or impersonation of existing OIDC users.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

CISA ADP9.0CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refclaroty.comrefclaroty.com/product-security/oidc-configurations-in-claroty-secure-access