CVE-2025-54603

critical · 9

An incorrect OIDC authentication flow in Claroty Secure Access 3.3.0 through 4.0.2 can result in unauthorized user creation or impersonation of existing OIDC users.

CVSS

0.7%

EPSS (exploit prob.)

55th

EPSS percentile

2025-10-14

Published

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-284

References

https://claroty.com
https://claroty.com/product-security/oidc-configurations-in-claroty-secure-access

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-54603