CVE-2025-15621: Sparx Enterprise Architect Client does not verify the receiver of OAuth2 credentials during OpenID authentication
Insufficiently Protected Credentials in Sparx Systems Pty Ltd. Sparx Enterprise Architect. Client does not verify the receiver of OAuth2 credentials during OpenID authentication
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15621?
CVE-2025-15621 is classified as having a medium severity due to potential unauthorized access resulting from insufficient verification of OAuth2 credentials.
How do I fix CVE-2025-15621?
To fix CVE-2025-15621, update Sparx Enterprise Architect to the latest version, which includes patches for the OpenID authentication vulnerabilities.
What specific issue does CVE-2025-15621 address?
CVE-2025-15621 addresses the insufficient verification of the OAuth2 credentials receiver during OpenID authentication in Sparx Enterprise Architect.
What are the potential risks of CVE-2025-15621?
The potential risks of CVE-2025-15621 include unauthorized access to user accounts and sensitive data due to compromised OAuth2 credentials.
When was CVE-2025-15621 reported?
CVE-2025-15621 was reported as a vulnerability in Sparx Enterprise Architect, highlighting an issue with OAuth2 credential verification.