CVE-2025-8049 - CVE House
Back to Database
Status published Low CVE-2025-8049

Insufficient Access Control vulnerability has been discovered in OpenText Flipper.

Vulnerability Description

Insufficient Granularity of Access Control vulnerability in opentext Flipper allows Exploiting Incorrectly Configured Access Control Security Levels. The vulnerability could allow a low-privilege user to elevate privileges within the application. This issue affects Flipper: 3.1.2.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-8049

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Lockheed Martin Red Team

References

More from opentext

View All →
CVE-2025-8053
Insufficient access control vulnerability has been discovered in Opentext Flipper.
Low 1
CVE-2025-8052
HQL Injection vulnerability has been discovered in Opentext Flipper.
Low 1
CVE-2025-8051
Path traversal validation vulnerability has been discovered in opentext Flipper.
Medium 5.3
CVE-2025-8050
External Control of File vulnerability has been discovered in opentext Flipper.
Medium 5.3
CVE-2025-8048
External Control of File path vulnerability has been discovered on Openext Flipper.
Medium 5.3

Affected Vendor

Affected Software

Flipper
Vulnerable Versions:
3.1.2

Timeline

Official Publish: October 20th, 2025
Last Modified: October 20th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-1220

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.