{"id":"CVE-2025-35054","aliases":["EUVD-2025-33573","GHSA-hg8f-f9vp-h6j2"],"status":"published","title":"Newforma Info Exchange (NIX) insufficiently protected credentials","description":"Newforma Info Exchange (NIX) stores credentials  used to configure NPCS in 'HKLM\\Software\\WOW6432Node\\Newforma\\\u003cversion\u003e\\Credentials'. The credentials are encrypted but the encryption key is stored in the same registry location. Authenticated users can access both the credentials and the encryption key. If these are Active Directory credentials, an attacker may be able to gain access to additional systems and resources.","severity":{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00082,"percentile":0.00189,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-257","CWE-522","CWE-922"],"published":"2025-10-09T20:20:40Z","modified":"2026-10-08T13:10:00Z","products":[{"vendor":"newforma","product":"project center"},{"vendor":"newforma","product":"project_center"}],"references":[{"url":"https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-282-01.json","tags":["Third Party Advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-35054","tags":["Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-35054"},{"url":"https://github.com/advisories/GHSA-hg8f-f9vp-h6j2"}],"sources":{"cve":[{"id":"CVE-2025-35054","title":"Newforma Info Exchange (NIX) insufficiently protected credentials","description":"Newforma Info Exchange (NIX) stores credentials  used to configure NPCS in 'HKLM\\Software\\WOW6432Node\\Newforma\\\u003cversion\u003e\\Credentials'. The credentials are encrypted but the encryption key is stored in the same registry location. Authenticated users can access both the credentials and the encryption key. If these are Active Directory credentials, an attacker may be able to gain access to additional systems and resources.","status":"published","published":"2025-10-09T20:20:40.025Z","modified":"2025-10-10T19:35:47.871Z","cvss":[{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","level":"medium","assessor":"cna"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-922","CWE-522","CWE-257"],"updated_at":"2026-11-02T14:32:51.199669Z"}],"euvd":[{"id":"EUVD-2025-33573","description":"Newforma Info Exchange (NIX) stores credentials  used to configure NPCS in 'HKLM\\Software\\WOW6432Node\\Newforma\\\u003cversion\u003e\\Credentials'. The credentials are encrypted but the encryption key is stored in the same registry location. Authenticated users can access both the credentials and the encryption key. If these are Active Directory credentials, an attacker may be able to gain access to additional systems and resources.","status":"published","published":"2025-10-09T20:20:40Z","modified":"2025-10-10T19:35:47Z","cvss":[{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-02T20:31:33.954405Z"}],"ghsa":[{"id":"GHSA-hg8f-f9vp-h6j2","title":"Newforma Info Exchange (NIX) stores credentials  used to configure NPCS in 'HKLM\\Software...","description":"Newforma Info Exchange (NIX) stores credentials  used to configure NPCS in 'HKLM\\Software\\WOW6432Node\\Newforma\\\u003cversion\u003e\\Credentials'. The credentials are encrypted but the encryption key is stored in the same registry location. Authenticated users can access both the credentials and the encryption key. If these are Active Directory credentials, an attacker may be able to gain access to additional systems and resources.","status":"published","published":"2025-10-09T21:31:12Z","modified":"2025-10-09T21:31:19Z","cvss":[{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-257"],"updated_at":"2026-11-02T15:03:55.615501Z"}],"nvd":[{"id":"CVE-2025-35054","description":"Newforma Info Exchange (NIX) stores credentials  used to configure NPCS in 'HKLM\\Software\\WOW6432Node\\Newforma\\\u003cversion\u003e\\Credentials'. The credentials are encrypted but the encryption key is stored in the same registry location. Authenticated users can access both the credentials and the encryption key. If these are Active Directory credentials, an attacker may be able to gain access to additional systems and resources.","status":"published","published":"2025-10-09T21:15:36.357Z","modified":"2026-10-08T13:10:00.2Z","cvss":[{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"primary"}],"cwes":["CWE-257","CWE-522","CWE-922"],"updated_at":"2026-11-02T14:11:36.851295Z"}]}}