CVE-2025-59501

Published Oct 31, 2025

Last updated a month ago

Microsoft Configuration Manager

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-59501 is an authentication bypass vulnerability affecting Microsoft Configuration Manager. It allows an authorized attacker to perform spoofing over an adjacent network. The vulnerability can be exploited by modifying the User Principal Name (UPN) of a valid Microsoft Entra ID account or by creating a new account to impersonate an Active Directory user with the same UPN that was not synchronized to Entra ID. Successful exploitation could allow an attacker to gain unauthorized administrative control over Microsoft Configuration Manager and its managed clients.

Description: Authentication bypass by spoofing in Microsoft Configuration Manager allows an authorized attacker to perform spoofing over an adjacent network.
Source: secure@microsoft.com
NVD status: Analyzed
Products: configuration_manager_2403, configuration_manager_2409, configuration_manager_2503

Risk scores

CVSS 3.1

Type: Primary
Base score: 4.8
Impact score: 3.6
Exploitability score: 1.2
Vector string: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Severity: MEDIUM

Weaknesses

secure@microsoft.com: CWE-290

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:microsoft:configuration_manager_2403:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DD3A7EF4-3494-4BE8-8ACA-C5DFF72CD6AC",
            "versionEndExcluding": "5.00.9128.1037"
          },
          {
            "criteria": "cpe:2.3:a:microsoft:configuration_manager_2409:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "85ED19B5-E9EB-4203-8EF2-1C221B22CF41",
            "versionEndExcluding": "5.00.9132.1031"
          },
          {
            "criteria": "cpe:2.3:a:microsoft:configuration_manager_2503:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7C22B35A-E6F2-4FD5-AEA2-F31850DDA104",
            "versionEndExcluding": "5.0.9135.1013"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.