Skip to content
CVE PROGRAM SOURCE RECORD5.2 Medium

CVE-2025-6083

ExtremeCloud Universal ZTNA Improper Authorization

Description

In ExtremeCloud Universal ZTNA, a syntax error in the 'searchKeyword' condition caused queries to bypass the owner_id filter. This issue may allow users to search data across the entire table instead of being restricted to their specific owner_id.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Extreme Networks ExtremeCloud Universal ZTNA

Default version status: unaffected

  • 25.2.0affected

References