Vulnerability · Published Mar 31, 2025 · Assigned by FSOFT
CVE-2025-3013Insecure direct object references (IDOR) in NightWolf Penetration Platform
High 8.3
In plain English
A high-severity security flaw in NightWolf Penetration Platform from FPT Software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 25% of all known vulnerabilities).
Severity (CVSS 4.0)8.3High
Exploit odds (30 days)0.3%top 74.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Insecure Direct Object References (IDOR) in access control in Customer Portal before 2.1.4 on NightWolf Penetration Testing allows an attacker to access via manipulating request parameters or object references.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| FPT Software | NightWolf Penetration Platform | 2.1.2 – through 2.1.4 |
Weakness: CWE-285 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N