Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2025-35054

Newforma Info Exchange (NIX) insufficiently protected credentials

Description

Newforma Info Exchange (NIX) stores credentials used to configure NPCS in 'HKLM\Software\WOW6432Node\Newforma\<version>\Credentials'. The credentials are encrypted but the encryption key is stored in the same registry location. Authenticated users can access both the credentials and the encryption key. If these are Active Directory credentials, an attacker may be able to gain access to additional systems and resources.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Newforma Project Center

Default version status: unknown

  • *affected
  • 2024.3affected

References