CVE-2025-54603

CriticalCVSS 9.0/10Last modified Sep 8, 2026

Description

An incorrect OIDC authentication flow in Claroty Secure Access 3.3.0 through 4.0.2 can result in unauthorized user creation or impersonation of existing OIDC users.

Metrics

CVSS 3.1 9.0/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published
Oct 14, 2025
Last modified
Sep 8, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-546047.5Bitcoin Core through 29.0 allows Uncontrolled Resource Consumption (issue 1 of 2).CVE-2025-546057.5Bitcoin Core through 29.0 allows Uncontrolled Resource Consumption (issue 2 of 2).CVE-2025-546067.1Status verification vulnerability in the lock screen module. Impact: Successful exploitation of this vulnerability will affect availability CVE-2025-546077.5Authentication management vulnerability in the ArkWeb module. Impact: Successful exploitation of this vulnerability may affect service confiCVE-2025-546084.0Vulnerability that allows setting screen rotation direction without permission verification in the screen management module. Impact: SuccessCVE-2025-546097.5Out-of-bounds access vulnerability in the audio codec module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2025-546107.5Out-of-bounds access vulnerability in the audio codec module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2025-546115.5EXTRA_REFERRER resource read vulnerability in the Gallery module. Impact: Successful exploitation of this vulnerability may affect service cCVE-2025-546123.3Iterator failure vulnerability in the card management module. Impact: Successful exploitation of this vulnerability may affect function stabCVE-2025-546133.3Iterator failure vulnerability in the card management module. Impact: Successful exploitation of this vulnerability may affect function stabCVE-2025-546145.5Input verification vulnerability in the home screen module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2025-546155.5Vulnerability of insufficient information protection in the media library module. Impact: Successful exploitation of this vulnerability may