Unauthorized Access Vulnerability in Progress Software Hybrid Data Pipeline Server

CVE-2025-6505

What is CVE-2025-6505?

Versions 4.6.2.3226 and earlier of Progress Software's Hybrid Data Pipeline Server on Linux are susceptible to a security flaw that allows unauthorized access through a combination of client credentials. This issue arises during the OAuth handshake, where the server does not properly validate client credentials provided via both HTTP headers and request parameters. Exploiting this flaw could lead to client impersonation, putting sensitive information and system integrity at risk.

References