Paper/Archive/CVE-2025-8053

CVE-2025-8053

opentext Flipper — Insufficient access control vulnerability has been discovered in Opentext Flipper.

CVSS 9.1 (NVD)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 17.5.175 × 203.5 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Insufficient Granularity of Access Control vulnerability in opentext Flipper allows Exploiting Incorrectly Configured Access Control Security Levels. The vulnerability could allow a low privilege user to interact with the backend API without sufficient privileges. This issue affects Flipper: 3.1.2.

Affected

ProductAffectedFixed inSource

Flipper3.1.2–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

OpenText (CNA)1.0CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/S:P/AU:Y/R:U/V:D/RE:M/U:Green

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refsupport.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0850532