CVE-2025-2229

Summary

CVE-2025-2229 refers to a vulnerability in which tokens are generated using a combination of the username, current date/time, and a fixed AES-128 encryption key. This means that the same key is used across all installations, making it easier for attackers to decrypt these tokens and gain unauthorized access to affected systems. This vulnerability could lead to serious security implications if exploited, including potential data breaches and unauthorized system access. Organizations using the affected software are advised to apply the necessary patches or updates as soon as possible to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.