Insufficient Access Control in Opentext Flipper
CVE-2025-8049
2.3LOW
What is CVE-2025-8049?
A vulnerability exists in Opentext Flipper that stems from inadequate granularity of access control settings. This flaw may allow users with low privileges to exploit misconfigured access control security levels, leading to potentially unauthorized privilege escalation within the application. It is important for users and administrators of Flipper 3.1.2 to assess their configuration and apply necessary security measures to protect against unauthorized access.
Affected Version(s)
Flipper 3.1.2
References
CVSS V4
Score:
2.3
Severity:
LOW
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Lockheed Martin Red Team