BaseFortify

Publication date: 2025-10-27

Last updated on: 2025-10-31

Assigner: MITRE

Description

An issue was discovered in BAE SOCET GXP before 4.6.0.2. The SOCET GXP Job Status Service fails to authenticate requests. In some configurations, this may allow remote or local users to abort jobs or read information without the permissions of the job owner.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-27

Last Modified

2025-10-31

Generated

2026-07-06

AI Q&A

2025-10-27

EPSS Evaluated

2026-07-05

NVD

CVE-2025-54970

Affected Vendors & Products

Vendor	Product	Version / Range
baesystems	socet_gxp	to 4.6.0.2 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

Executive Summary

This vulnerability exists in BAE SOCET GXP versions before 4.6.0.2, where the Job Status Service does not properly authenticate requests. This flaw can allow remote or local users to abort jobs or access job information without having the necessary permissions of the job owner.

Impact Analysis

The vulnerability can impact you by allowing unauthorized users to interrupt ongoing jobs or access sensitive job information that they should not have permission to see. This could lead to disruption of operations and potential exposure of confidential data.

Hi! I’m here to help you understand CVE-2025-54970. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70