What the vulnerability does
01Description
Improper access control for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an unauthenticated user to potentially enable information disclosure via adjacent access.
CVSS base score
4.3/10
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Key dates
02Disclosure timeline
May 13, 2025
CVE published
May 14, 2025
Record updated
External resources
03References
Related vulnerabilities
04Related CVE
CVE-2021-33162
CVE-2026-24302 Azure Arc Elevation of Privilege Vulnerability
CVE-2019-1686 Cisco ASR 9000 Series Aggregation Services Routers ACL Bypass Vulnerability
CVE-2025-55261 HCL Aftermarket DPC is affected by Missing Functional Level Access Control
CVE-2026-40304 zrok's broken ownership check in DELETE /api/v2/unaccess allows non-admin to delete global frontend records
