Skip to content
CVE PROGRAM SOURCE RECORD6.7 Medium

CVE-2025-11906

Privilege escalation via writable configuration files in Progress Flowmon

Description

A vulnerability exists in Progress Flowmon versions prior 12.5.6 where certain system configuration files have incorrect file permissions, allowing a user with access to the default flowmon system user account used for SSH access to potentially escalate privileges to root during service initialization.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Progress Software Flowmon

Default version status: affected

  • Flowmon 12 versions prior to 12.5.6affected

References