An issue was discovered in BAE SOCET GXP before 4.6.0.2. The SOCET GXP Job Service does not require authentication. In some configurations, this may allow remote users to submit jobs, or local users to submit jobs that will execute with the permissions of other users.
CVE-2025-54968
CVSS base score
8.8 (v3.1)
Severity
HIGH
Attack vector
Network
Weakness
CWE-284
Last modified
November 5, 2026
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
baesystems socet gxp
References
- www.baesystems.com Product
- www.geospatialexploitationproducts.com Mitigation, Vendor Advisory