Auth bypass in Fpt Software Nightwolf Penetration Platform
CVE-2025-3014
Insecure Direct Object References (IDOR) in access control in Tracking 2.1.4 on NightWolf Penetration Testing allows an attacker to access via manipulating request parameters or object references.
EPSS: 0.003 (22.1th percentile) — read the EPSS interpretation.
Affected products
- Fpt Software Nightwolf Penetration Platform — versions 2.1.4, 2.1.5