CVE-2019-25313: XSRF in FlexNet Publisher 11.12.1

The primary impact of CVE-2019-25313 is the ability for an attacker to create new administrative accounts within FlexNet Publisher without any authentication. This can be achieved by crafting a malicious HTML form that tricks an authenticated user into unknowingly submitting a request to create the new account. Once created, the attacker can use these credentials to gain full administrative privileges, allowing them to modify configurations, access sensitive data, and potentially compromise the entire system. The blast radius extends to any data managed by FlexNet Publisher, including licensing information and software deployment details. Successful exploitation could lead to significant disruption of operations and data breaches.

1. Reserved2026-02-11
2. Published2026-02-11
3. Modified2026-03-05
4. EPSS updated2026-03-23

Due to the absence of a patch for CVE-2019-25313, mitigation strategies focus on reducing the attack surface and minimizing the potential impact. Implement strict access controls, limiting the number of users with administrative privileges. User awareness training is crucial to educate users about the risks of XSRF attacks and how to avoid falling victim to malicious requests. Consider implementing a Web Application Firewall (WAF) with XSRF protection rules to filter out malicious requests. Regularly review user accounts and permissions to identify and remove any unauthorized accounts. While a direct fix is unavailable, diligent monitoring and proactive security measures are essential.