4.8
Medium
CVE-2025-59501 Authentication bypass by spoofing in Microsoft Configuration Manager allows an authorized attacker to perform spoofing…
Description
Authentication bypass by spoofing in Microsoft Configuration Manager allows an authorized attacker to perform spoofing over an adjacent network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Configuration Manager 1.0 | 1.0.0 → < 5.00.9128.1037 | 5.00.9128.1037 |
| Microsoft Configuration Manager 2409 1.0 | 1.0.0 → < 5.00.9132.1031 | 5.00.9132.1031 |
References
- Microsoft Configuration Manager Spoofing Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft Configuration Manager
The 9 CVEs of Microsoft Configuration Manager →
CVE-2026-88075
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration…
8.8
High
CVE-2026-70049
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration…
8.0
High
CVE-2026-47301
Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a…
8.8
High
CVE-2025-47179
Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges locally
6.7
Medium