Read the docs
TI-2025-24299 Aliases CVE-2025-34143GHSA-v93r-q3gh-68x8

ETQ Reliance CG Authentication Bypass via Trailing Space RCE

Priority HIGH 75CWE-269Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Privilege escalation, Security bypass, Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-269, CWE-288 and CWE-78.

Summary

An authentication bypass vulnerability exists in ETQ Reliance on the CG (legacy) platform. The application allowed login as the privileged internal SYSTEM user by manipulating the username field. The SYSTEM account does not require a password, enabling attackers with network access to the login page to obtain elevated access. Once authenticated, an attacker could achieve remote code execution by modifying Jython scripts within the application. This issue was resolved by introducing stricter validation logic to exclude internal accounts from public authentication workflows in version MP-4583.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.38043 98th percentileScored 2026-11-07
Fix Fixed Reliance CG (legacy) (ETQ): MP-4583

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
ETQReliance CG (legacy)before MP-4583MP-4583Patch availableCNA
  • Reliance CG (legacy) VendorETQ Affected before MP-4583 Fixed in MP-4583 Patch available CNA

Remediation

  • Fix · CNA Reliance CG (legacy) (ETQ) Fixed in MP-4583

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    ETQ Reliance CG (legacy) — etq.com/blog/etq-reliance-security-update

    4 records Highest priority Priority HIGH 1 HIGH, 1 MEDIUM, 2 LOW

    Other records, highest priority first

    • TI-2025-24296 ETQ Reliance CG/NXG API Authorization Bypass via ;localized-text URI SuffixPriority MEDIUM 45
    • TI-2025-24298 ETQ Reliance CG < SE.2025.1 / < 2025.1.2 XXE Injection in SSO SAML HandlerPriority LOW 38
    • TI-2025-24297 ETQ Reliance CG < SE.2025.1 Reflected XSS in `SQLConverterServlet`Priority LOW 27
    Show all 4 records → Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-34143
  2. 2026-10-03 Alias added: GHSA-v93r-q3gh-68x8

References

Patch 1

Other 2

  • TI-2025-24296 ETQ Reliance CG/NXG API Authorization Bypass via ;localized-text URI Suffix CVSS 4.0HIGH 8.7
  • TI-2025-24298 ETQ Reliance CG < SE.2025.1 / < 2025.1.2 XXE Injection in SSO SAML Handler CVSS 4.0MEDIUM 6.9
  • TI-2025-24297 ETQ Reliance CG < SE.2025.1 Reflected XSS in `SQLConverterServlet` CVSS 4.0MEDIUM 5.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences