PT-2025-44375
CVE-2025-11906
·
Published
2025-10-30
·
Updated
2026-10-08
Description by
CVSS 3.1
6.7
MediumMetricsAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Progress Flowmon versions prior to 12.5.6
Description
A flaw exists in Progress Flowmon where system configuration files have incorrect file permissions. A user with access to the default flowmon system user account used for SSH access could potentially escalate privileges to root during service initialization.
Recommendations
Update Progress Flowmon to version 12.5.6 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾