Description
NIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67 generates predictable tokens (that depend on username, time, and the fixed 7Dl9#dj- string) and thus allows unauthenticated users with a Common Access Card (CAC) to escalate privileges and compromise any account, including administrators.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
NIH BRICS
Default version status: unknown
0 to ≤ 14.0.0-67affected
References
- https://github.com/brics-dev/brics ↗
- https://brics.cit.nih.gov ↗
- https://github.com/brics-dev/brics/blob/26bc6bb627a9a60e6c6a8a8c29735ae98c2e2679/core/src/main/java/gov/nih/tbi/CoreConstants.java#L38 ↗
- https://github.com/brics-dev/brics/blob/26bc6bb627a9a60e6c6a8a8c29735ae98c2e2679/service/src/main/java/gov/nih/tbi/account/service/complex/AccountManagerImpl.java#L725-L732 ↗
- https://github.com/RoseHacks/Vulnerability.Research/blob/main/CVE-2025-27580/README.md ↗
- https://bugculture.io/CVE-2025-27580/ ↗