CVE-2025-11906 — Privilege escalation via writable configuration files in Progress Flowmon
A vulnerability exists in Progress Flowmon versions prior 12.5.6 where certain system configuration files have incorrect file permissions, allowing a user with access to the def…
Published: 2025-10-30 · CVSS: 6.7 · CVSS 3.1
A vulnerability exists in Progress Flowmon versions prior 12.5.6 where certain system configuration files have incorrect file permissions, allowing a user with access to the default flowmon system user account used for SSH access to potentially escalate privileges to root during service initialization.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7