BaseFortify

Publication date: 2025-10-27

Last updated on: 2025-10-31

Assigner: MITRE

Description

TRUfusion Enterprise through 7.10.4.0 exposes the encrypted COOKIEID as an authentication mechanism for some endpoints such as /trufusionPortal/getProjectList. However, the application uses a static key to create the encrypted cookie, ultimately allowing anyone to forge cookies and gain access to sensitive internal information.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-27

Last Modified

2025-10-31

Generated

2026-07-06

AI Q&A

2025-10-27

EPSS Evaluated

2026-07-05

NVD

CVE-2025-27223

Affected Vendors & Products

Vendor	Product	Version / Range
rocketsoftware	trufusion_enterprise	to 7.10.4.0 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-1004	The product uses a cookie to store sensitive information, but the cookie is not marked with the HttpOnly flag.

Attack-Flow Graph

Executive Summary

This vulnerability in TRUfusion Enterprise up to version 7.10.4.0 involves the exposure of an encrypted COOKIEID used for authentication on certain endpoints like /trufusionPortal/getProjectList. The application uses a static key to encrypt this cookie, which allows attackers to forge cookies and gain unauthorized access to sensitive internal information.

Impact Analysis

An attacker can exploit this vulnerability to forge authentication cookies, thereby gaining unauthorized access to sensitive internal information within the TRUfusion Enterprise application. This could lead to data breaches or unauthorized actions within the system.

Hi! I’m here to help you understand CVE-2025-27223. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70