Critical Authentication Flaw in Netwrix Directory Manager by Netwrix

CVE-2025-48746

What is CVE-2025-48746?

The Netwrix Directory Manager, previously known as Imanami GroupID, has a significant security vulnerability that affects its authentication processes. Versions 11.0.0.0 and earlier, as well as 11.1.25134.03 and prior, fail to implement proper authentication methods for critical functions, potentially allowing unauthorized access to sensitive data and operations within the application. Organizations using these versions should assess their exposure and take immediate action to mitigate potential risks.

References