CVE search · CVE-2025-48707
CVE-2025-48707
high 7.5
An issue was discovered in Stormshield Network Security (SNS) before 5.0.1. TPM authentication information could, in some HA use cases, be shared among administrators, which can cause secret sharing.
Details
- Status
- Analyzed
- Published
- Last changed
- Source
- cve@mitre.org
- Weakness
- CWE-284
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 3.1 | high 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
134c704f-9b21-4f2e-91b3-4a467353bcc0Secondary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
- stormshield · stormshield_network_security
References
- https://advisories.stormshield.eu/2025-003/Vendor Advisory