CVE-2025-59270: Pspete Pspas

Low severity, CVSS 3.1. EPSS: 0.2% chance of exploitation in the next 30 days.

psPAS PowerShell module does not explicitly enforce TLS 1.2 within the 'Get-PASSAMLResponse' function during the SAML authentication process. An unauthenticated attacker in a 'Man-in-the-Middle' position could manipulate the TLS handshake and downgrade TLS to a deprecated protocol. Fixed in 7.0.209.

Affected products

• Pspete Pspas: from 6.4.85, before 7.0.209 (fixed in 7.0.209)

Published 2025-09-16. Last modified 2026-06-17.