Skip to content
CVE PROGRAM SOURCE RECORD5.7 Medium

CVE-2025-15621

Sparx Enterprise Architect Client does not verify the receiver of OAuth2 credentials during OpenID authentication

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
NCSC-FI

Description

Insufficiently Protected Credentials in Sparx Systems Pty Ltd. Sparx Enterprise Architect. Client does not verify the receiver of OAuth2 credentials during OpenID authentication

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Sparx Systems Pty Ltd. Sparx Enterprise Architect

Default version status: unknown

  • 16.1.1627affected
  • 17.1.1714unaffected

References