CVE-2025-10224: Incorrect Evaluation of LDAP Nested Groups during Login in AxxonSoft Axxon One (C-Werk)

Q: What is the severity of CVE-2025-10224?

CVE-2025-10224 has been classified as a high severity vulnerability due to its potential impact on user access control.

Q: How do I fix CVE-2025-10224?

To fix CVE-2025-10224, upgrade the AxxonSoft Axxon One software to version 2.0.3 or later.

Q: Who is affected by CVE-2025-10224?

CVE-2025-10224 affects users of AxxonSoft Axxon One version 2.0.2 and earlier running on the Windows operating system.

Q: What kind of vulnerability is CVE-2025-10224?

CVE-2025-10224 is an improper authentication vulnerability related to the evaluation of nested LDAP group memberships.

Q: Can CVE-2025-10224 lead to unauthorized access?

Yes, CVE-2025-10224 can result in unauthorized access or misassignment of roles for authenticated users.

Published Sep 10, 2025

Updated

Improper Authentication (CWE-287) in the LDAP authentication engine in AxxonSoft Axxon One (C-Werk) 2.0.2 and earlier on Windows allows a remote authenticated user to be denied access or misassigned roles via incorrect evaluation of nested LDAP group memberships during login.

Affected Software

1 affected component

AxxonSoft Axxon One<2.0.2

Remediation

Information

Upgrade to Axxon One 2.0.2 (C-Werk) or later, where LDAP resolution logic was updated to recursively parse and flatten nested group structures before evaluating role binding. Ensure external LDAP directory structures are regularly audited for correct nesting and role mapping.

Event History

Sep 10, 2025

CVE Published

via MITRE·12:36 PM

Data Sourced

via MITRE·12:36 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·01:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-10224?

CVE-2025-10224 has been classified as a high severity vulnerability due to its potential impact on user access control.

How do I fix CVE-2025-10224?