NetSight
critical9.0

CVE-2025-54603

An incorrect OIDC authentication flow in Claroty Secure Access 3.3.0 through 4.0.2 can result in unauthorized user creation or impersonation of existing OIDC u…

Impact

An incorrect OIDC authentication flow in Claroty Secure Access 3.3.0 through 4.0.2 can result in unauthorized user creation or impersonation of existing OIDC users.

Affected products

VendorProductAffected versions
ClarotyClaroty Secure Access 3.3.0
through 4.0.2

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

References