Medium severity5.0NVD Advisory· Published Oct 9, 2025· Updated Jun 17, 2026
CVE-2025-35056
CVE-2025-35056
Description
Newforma Info Exchange (NIX) '/UserWeb/Common/MarkupServices.ashx' 'StreamStampImage' accepts an encrypted file path and returns an image of the specified file. An authenticated attacker can read arbitrary files subject to the privileges of NIX, typically 'NT AUTHORITY\NetworkService', and the ability of StreamStampImage to process the file. The encrypted file path can be generated using the shared, hard-coded secret key described in CVE-2025-35052. This vulnerability cannot be exploited as an 'anonymous' user as described in CVE-2025-35062.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
30+ 1 more
- (no CPE)range: 0
- cpe:2.3:a:newforma:project_center:*:*:*:*:*:*:*:*range: <2024.1
Patches
Vulnerability mechanics
References
3- raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-282-01.jsonnvdThird Party Advisory
- www.cve.org/CVERecordnvdThird Party Advisory
- www.cve.org/CVERecordnvdThird Party Advisory
News mentions
0No linked articles in our index yet.