CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.1. Exploitation may require the attacker to be authenticated.
CVE
CVE-2025-40897
Severity
HIGH
CVSS
8.1
EPSS
0.33%
Original NVD Description
An access control vulnerability was discovered in the Threat Intelligence functionality due to a specific access restriction not being properly enforced for users with view-only privileges. An authenticated user with view-only privileges for the Threat Intelligence functionality can perform administrative actions on it, altering the rules configuration, and/or affecting their availability.