CNNVD-202510-1249 Information
CNNVD ID
CNNVD-202510-1249
Related CVE
- CNNVD Published: 2025-10-09
Description (Chinese)
Newforma Project Center Server是Newforma公司的一个建筑、工程和施工(AEC)行业的项目信息管理解决方案，用于集中存储和管理项目文档和协作。 Newforma Project Center Server存在安全漏洞，该漏洞源于将凭据和加密密钥存储在相同注册表位置，可能导致攻击者获取额外系统和资源访问权限。
Description (English)
Newforma Project Center Server is a project information management solution for a Newforma construction, engineering and construction (AEC) industry for central storage and management of project files and collaboration. Newforma Project Center Server has a security loophole, which stems from the storage of certificates and encryption keys in the same registry location, which may result in the aggressor gaining access to additional systems and resources.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
Newforma
Published
2025-10-09
Last Modified
2026-02-24
References
https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-282-01.json https://www.cve.org/CVERecord?id=CVE-2025-35054
Patch
https://www.newforma.com/newforma-project-center/
Share on: