CVE-2025-11084 — FactoryTalk® DataMosaix™ Private Cloud – Authentication Bypass
A security issue exists within DataMosaix™ Private Cloud, allowing attackers to bypass MFA during setup and obtain a valid login-token cookie without knowing the users password.…
Published: 2025-11-11 · CVSS: 7.6 · CVSS 4.0
A security issue exists within DataMosaix™ Private Cloud, allowing attackers to bypass MFA during setup and obtain a valid login-token cookie without knowing the users password. This vulnerability occurs when MFA is enabled but not completed within a 7-day period.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7