CVE-2025-30170: Admin Authorized Exposure of file path, file size or file existence
Exposure of file path, file size or file existence vulnerabilities in ASPECT provide attackers access to file system information if session administrator credentials become compromised. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-30170?
CVE-2025-30170 has a medium severity rating due to the potential for unauthorized access to sensitive file system information.
How can I fix CVE-2025-30170?
To fix CVE-2025-30170, users should update ASPECT-Enterprise, NEXUS Series, and MATRIX Series to versions later than 3.08.03.
What products are affected by CVE-2025-30170?
CVE-2025-30170 affects ASPECT-Enterprise, NEXUS Series, and MATRIX Series up to version 3.08.03.
What are the potential risks of CVE-2025-30170?
The risks associated with CVE-2025-30170 include attackers gaining unauthorized access to file paths, sizes, and existence, which may lead to further exploitation.
Is user action required for CVE-2025-30170?
Yes, user action is required to mitigate CVE-2025-30170 by applying the necessary updates to the affected ASPECT products.