CVE-2025-63909 - Vulnerability Analysis

Overview

Cohesity TranZman Migration Appliance Release 4.0 Build 14614 contains a broken access control caused by incorrect access control in /opt/SRLtzm/bin/TapeDumper, letting attackers escalate privileges to root and read/write arbitrary files, exploit requires attacker access to the component.

Severity & Score

Impact

Attackers can escalate privileges to root and read/write arbitrary files, leading to full system compromise.

Mitigation

Update to the latest version of Cohesity TranZman Migration Appliance.

References

• https://gist.github.com/GregDurys/d402038147e36de5908159d9722072ef
• https://github.com/GregDurys/Cohesity-TranZman-CVEs

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner