CVE-2025-25497

An issue in account management interface in Netsweeper Server v.8.2.6 and earlier (fixed in v.8.2.7) allows unauthorized changes to the "Account Owner" field due to client-side-only restrictions and a lack of server-side validation. This vulnerability enables account ownership reassignment to or away from any user.

An issue in account management interface in Netsweeper Server v.8.2.6 and earlier (fixed in v.8.2.7) allows unauthorized changes to the "Account Owner" field due to client-side-only restrictions and a lack of server-side validation. This vulnerability enables account ownership reassignment to or away from any user.

Un problema en la interfaz de administración de cuentas en Netsweeper Server v.8.2.6 y versiones anteriores (solucionado en v.8.2.7) permite realizar cambios no autorizados en el campo "Propietario de la cuenta" debido a restricciones exclusivas del lado del cliente y a la falta de validación del lado del servidor. Esta vulnerabilidad permite reasignar la propiedad de la cuenta a cualquier usuario o quitarle esta.