Description
Omnissa Workspace ONE UEM 包含辅助上下文路径遍历漏洞。恶意行为者可能能够通过向受限的 API 端点发送精心设计的 GET请求（只读）来访问敏感信息。
Omnissa Workspace ONE UEM CVE-2025-25231 路径遍历
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-25231
https://static.omnissa.com/sites/default/files/OMSA-2025-0004.pdf
https://slcyber.io/research-center/secondary-context-path-traversal-in-omnissa-workspace-one-uem/
https://kb.omnissa.com/s/article/6001021
https://cloud.tencent.com/developer/article/2579659
https://www.knowsafe.com/ti/info/0/999530
https://www.sentinelone.com/vulnerability-database/cve-2025-25231/
https://www.picussecurity.com/resource/blog/omnissa-workspace-one-cve-2025-25231-path-traversal-exploit
https://github.com/Threekiii/CVE
https://cn-sec.com/archives/5118884.html