CVE-2025-1501
Medium
Description
An access control vulnerability was discovered in the Request Trace and Download Trace functionalities of CMC before 25.1.0 due to a specific access restriction not being properly enforced for users with limited privileges. An authenticated user with limited privileges can request and download trace files due to improper access restrictions, potentially exposing unauthorized network data.
SeverityMedium
CVSS4.3
Exploit probability—
ProductCMC
PublishedAug 26, 2025
First seenAug 26, 2025
Weakness typeCWE-863Incorrect authorization
How to fix
Update
- Nozomi Networks CMC25.1.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Nozomi Networks CMC | v < 25.1.0 | 25.1.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.