Skip to content
OpenAdvisories
Medium · 5.2 CVE-2025-6083 EUVD-2025-18301GHSA-hm47-446q-7w5f

ExtremeCloud Universal ZTNA Improper Authorization

Published Jun 13, 2025 · Updated Jun 17, 2025 · Assigned by ExtremeNetworks

Description

In ExtremeCloud Universal ZTNA, a syntax error in the 'searchKeyword' condition caused queries to bypass the owner_id filter. This issue may allow users to search data across the entire table instead of being restricted to their specific owner_id.

Affected products

VendorProductAffectedFixed
Extreme Networks ExtremeCloud Universal ZTNA 25.2.0 —

References