CVE-2025-32982

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Apr 25, 2025
Updated: Apr 29, 2025
CWE ID 285

Summary

CVE-2025-32982 is a vulnerability affecting NETSCOUT's nGeniusONE before version 6.4.0 b2350. The report module in this software has a broken authorization schema, which means that unauthorized users might gain access to sensitive reports if they manage to bypass the authentication process. This issue poses a significant risk for organizations using nGeniusONE, as it can lead to unintended disclosure of confidential information. To mitigate this vulnerability, it is recommended that users upgrade to the latest version of nGeniusONE as soon as possible.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share