CVE-2025-6504: Possibilities of IP Spoofing via X-Forwarded-For (XFF) Header
In HDP Server versions below 4.6.2.2978 on Linux, unauthorized access could occur via IP spoofing using the X-Forwarded-For header.
Since XFF is a client-controlled header, it could be spoofed, allowing unauthorized access if the spoofed IP matched a whitelisted range.
This vulnerability could be exploited to bypass IP restrictions, though valid user credentials would still be required for resource access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
HDP Serverto a version that resolves this vulnerability.Fixed in 4.6.2.2978
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6504?
CVE-2025-6504 has been classified with a critical severity rating due to potential unauthorized access vulnerabilities.
How do I fix CVE-2025-6504?
To fix CVE-2025-6504, upgrade your Hortonworks HDP Server to version 4.6.2.2978 or later.
Who is affected by CVE-2025-6504?
CVE-2025-6504 affects Hortonworks HDP Server versions below 4.6.2.2978 on Linux systems.
What type of attack does CVE-2025-6504 relate to?
CVE-2025-6504 relates to unauthorized access attacks via IP spoofing using the X-Forwarded-For header.
Can CVE-2025-6504 lead to data breaches?
Yes, CVE-2025-6504 could potentially lead to data breaches if unauthorized access exploits are successful.