Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2025-35056: Newforma Info Exchange allows attackers to read sensitive files

CVE-2025-35056 · published 1 year ago

Summary

An attacker with a Newforma Info Exchange account can access and view sensitive files on the system, potentially revealing confidential information. This can happen because the system does not properly validate file paths. To protect your data, ensure all users use strong, unique passwords and do not use shared secrets in your system.

What to do

Update newforma project_center to version 2024.1 or later.

Affected software

Vendor	Product	Affected versions
newforma	project_center	< 2024.1 `cpe:2.3:a:newforma:project_center::::::::`

Original advisory text

Newforma Info Exchange (NIX) '/UserWeb/Common/MarkupServices.ashx' 'StreamStampImage' accepts an encrypted file path and returns an image of the specified file. An authenticated attacker can read arbitrary files subject to the privileges of NIX, typically 'NT AUTHORITY\NetworkService', and the ability of StreamStampImage to process the file. The encrypted file path can be generated using the shared, hard-coded secret key described in CVE-2025-35052. This vulnerability cannot be exploited as an 'anonymous' user as described in CVE-2025-35062.

References

https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/... Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-35056 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-35062 Third Party Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker partial control

Severity

5.3 Medium

Exploitation

<1% chance of attack within 30 days

Type

CWE-22Path Traversal

Timeline

Published9 Oct 2025

Updated4 Nov 2026

First seen7 Mar 2026

Sources

CVE-2025-35056 · NVD

Track software like this

Free during beta