CVE-2025-59714 MEDIUM

CVE-2025-59714

Vendor Internet2
Product Grouper
Weakness CWE-863 · Incorrect authorization
Published September 19, 2025
Last update September 19, 2025
View on NVD All CVEs

CVSS base score

6.5/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

What the vulnerability does

01Description

In Internet2 Grouper 5.17.1 before 5.20.5, group admins who are not Grouper sysadmins can configure loader jobs.

Key dates

02Disclosure timeline

September 19, 2025 CVE published
September 19, 2025 Record updated