CVE-2025-6083: ExtremeCloud Universal ZTNA Improper Authorization
In ExtremeCloud Universal ZTNA, a syntax error in the 'searchKeyword' condition caused queries to bypass the ownerid filter. This issue may allow users to search data across the entire table instead of being restricted to their specific ownerid.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ExtremeCloud Universal ZTNAto a version that resolves this vulnerability.Fixed in 25.2.0Patch patch 2 or later
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6083?
CVE-2025-6083 has been rated as a high severity vulnerability due to its potential for unauthorized data access.
How do I fix CVE-2025-6083?
To fix CVE-2025-6083, ensure that you update ExtremeCloud Universal ZTNA to the latest version that includes a patch for this vulnerability.
What impact does CVE-2025-6083 have on my data security?
CVE-2025-6083 may allow unauthorized users to access and search all data in the database instead of being restricted to their own records.
Is CVE-2025-6083 being actively exploited?
As of now, there is no public information indicating that CVE-2025-6083 is actively being exploited in the wild.
What environments are affected by CVE-2025-6083?
CVE-2025-6083 affects the ExtremeCloud Universal ZTNA software deployed in enterprise environments.