Incorrect Permission Assignment Vulnerability in Netwrix Directory Manager by Netwrix
CVE-2025-48747

5MEDIUM

Key Information:

Vendor

Netwrix

Status
Netwrix Directory Manager
Vendor
CVE Published:
28 May 2025

What is CVE-2025-48747?

The vulnerability in Netwrix Directory Manager, including versions up to 11.0.0.0 and after 11.1.25134.03, stems from an incorrect handling of permissions for a critical resource. This could potentially allow unauthorized access or modifications, affecting the integrity and security posture of systems utilizing the affected versions.

References

https://netwrix.com
https://community.netwrix.com/t/adv-2025-014-critical-vul...

CVSS V3.1

Score:
5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.