CVE-2025-27028 — Read access of deprivileged Radiflow iSAP Smart Collector user
The Linux deprivileged user vpuser in Radiflow iSAP Smart Collector (CentOS 7 - VSAP 1.20) can read the entire file system content, including files belonging to other users and …
Published: 2025-07-09 · CVSS: 6.8 · CVSS 3.1
The Linux deprivileged user vpuser in Radiflow iSAP Smart Collector (CentOS 7 - VSAP 1.20) can read the entire file system content, including files belonging to other users and having restricted access (like, for example, the root password hash).
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7