CVE-2025-27581: Medium severity nih brics vulnerability
Published Apr 23, 2025
·Updated
NIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67 allows users who lack the InET role to access the InET module via direct requests to known endpoints.
Affected Software
1 affected component
Nih BRICS<=14.0.0-67
Event History
Apr 23, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Apr 24, 2025
Data Sourced
via NVD·12:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-27581?
CVE-2025-27581 is considered a high severity vulnerability due to unauthorized access to sensitive modules.
2
How do I fix CVE-2025-27581?
To remediate CVE-2025-27581, ensure that user roles are correctly configured to restrict access to the InET module.
3
What type of attack is facilitated by CVE-2025-27581?
CVE-2025-27581 allows unauthorized users to execute direct requests that could lead to data exposure and unauthorized actions.
4
Who is affected by CVE-2025-27581?
Organizations using NIH BRICS versions up to 14.0.0-67 are affected by CVE-2025-27581.
5
What are the potential consequences of CVE-2025-27581?
The potential consequences of CVE-2025-27581 include data breaches and unauthorized access to sensitive research information.