FlexNet Publisher 11.12.1 - Cross-Site Request Forgery (Ajout d'Administrateur Local)

The primary impact of CVE-2019-25313 is the ability for an attacker to create new administrative accounts within FlexNet Publisher without any authentication. This can be achieved by crafting a malicious HTML form that tricks an authenticated user into unknowingly submitting a request to create the new account. Once created, the attacker can use these credentials to gain full administrative privileges, allowing them to modify configurations, access sensitive data, and potentially compromise the entire system. The blast radius extends to any data managed by FlexNet Publisher, including licensing information and software deployment details. Successful exploitation could lead to significant disruption of operations and data breaches.

Organizations utilizing FlexNet Publisher version 11.12.1 are at risk, particularly those with limited security controls or a lack of user awareness training. Shared hosting environments where multiple users share the same FlexNet Publisher instance are also at increased risk, as an attacker could potentially compromise the entire environment through a single user’s account.

1. 2026-02-11Disclosure

   disclosure

1. Réservé2026-02-11
2. Publiée2026-02-11
3. Modifiée2026-03-05
4. EPSS mis à jour2026-03-23

Due to the absence of a patch for CVE-2019-25313, mitigation strategies focus on reducing the attack surface and minimizing the potential impact. Implement strict access controls, limiting the number of users with administrative privileges. User awareness training is crucial to educate users about the risks of XSRF attacks and how to avoid falling victim to malicious requests. Consider implementing a Web Application Firewall (WAF) with XSRF protection rules to filter out malicious requests. Regularly review user accounts and permissions to identify and remove any unauthorized accounts. While a direct fix is unavailable, diligent monitoring and proactive security measures are essential.