Back to search
CVE-2025-3838
Published: Apr 21, 2025
Modified: Apr 21, 2025
PUBLISHED
Description
An Improper Authorization vulnerability was identified in the EOL OVA based connect component which is deployed for installation purposes in the customer internal network. Under certain conditions, this could allow a bad actor to gain unauthorized access to the local db containing weakly hashed credentials of the installer. This EOL component was deprecated in September 2023 with end of support extended till January 2024.
| Vendor | Product | Versions |
|---|---|---|
Saviynt | OVA based Connect | affected AlmaLinux-8.x_SC2.0-Client-2.0affected AlmaLinux-8.x_SC2.0-Client-3.0affected CentOS-7.x_SC2.0-Client-2.0affected CentOS-7.x_SC2.0-Client-3.0affected RHEL-8.x_SC2.0-Client-2.0+1 more versions |
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now