Medium severity5.3NVD Advisory· Published Oct 9, 2025· Updated Jun 17, 2026
CVE-2025-35054
CVE-2025-35054
Description
Newforma Info Exchange (NIX) stores credentials used to configure NPCS in 'HKLM\Software\WOW6432Node\Newforma\\Credentials'. The credentials are encrypted but the encryption key is stored in the same registry location. Authenticated users can access both the credentials and the encryption key. If these are Active Directory credentials, an attacker may be able to gain access to additional systems and resources.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3*+ 1 more
- (no CPE)range: *
- cpe:2.3:a:newforma:project_center:*:*:*:*:*:*:*:*range: <=2024.3
Patches
Vulnerability mechanics
References
2- raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-282-01.jsonnvdThird Party Advisory
- www.cve.org/CVERecordnvdThird Party Advisory
News mentions
0No linked articles in our index yet.