Improper Permission Checks

🗓️ 15 Oct 2025 07:58:34Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 3 Views

ZooKeeper AdminServer has improper permission checks, letting authorized clients snapshot and restore without proper permissions.

Reporter	Title	Published	Views	Family All 41
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for Oct 2025	31 Oct 202511:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager for December 2025 - Multiple CVEs addressed	29 Jan 202607:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway are vulnerable due to improper permission check vulnerability in Zookeeper (CVE-2025-58457)	16 Apr 202614:52	–	ibm
IBM Security Bulletins	Security Bulletin: User Entity Behavior Analytics App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	28 Jan 202615:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway are vulnerable due to improper permission check vulnerability in Zookeeper (CVE-2025-58457)	16 Apr 202617:04	–	ibm
IBM Security Bulletins	Security Bulletin: Improper Permission Check in Apache ZooKeeper AdminServer Allows Unauthorized Snapshot and Restore Operations, affects watsonx.data	10 Feb 202604:58	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in zookeeper affects IBM Netezza Appliance	16 Dec 202509:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operations Analytics - Log Analysis is affected by insufficiently privileged clients to execute snapshot and restore commands due to Apache Zookeeper	6 Apr 202613:27	–	ibm
Tenable Nessus	Apache ZooKeeper 3.9.x < 3.9.4 Improper Permission Check	12 Mar 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2025-58457	29 Sep 202500:00	–	nessus

Vulners

Node

zookeeper zookeeperRange3.9.0–3.9.3java

zookeeper zookeeperMatch3.9.0java

zookeeper zookeeperMatch3.9.1java

zookeeper zookeeperMatch3.9.2java

Source	Link
zookeeper	www.zookeeper.apache.org/security.html
github	www.github.com/apache/zookeeper/commit/71e173fcbcc9deb784081cf867bd045df3c32635
zookeeper	www.zookeeper.apache.org/doc/r3.9.4/releasenotes.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-58457
openwall	www.openwall.com/lists/oss-security/2025/09/24/10
lists	www.lists.apache.org/thread/r5yol0kkhx2fzw22pxk1ozwm3oc6yxrx
zookeeper	www.zookeeper.apache.org/doc/current/zookeeperSnapshotAndRestore.html
github	www.github.com/apache/zookeeper

03 Jun 2026 09:43Current

7.4High risk

Vulners AI Score7.4

CVSS 3.14.3

EPSS0.00112

SSVC