Security Advisory

CVE-2019-25432

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-02-20 22:54:46
Last updated 2026-04-07 14:03:58
Assigner VulnCheck
CVSS score 8.8
State PUBLISHED

Description

Part-DB 0.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to login by injecting SQL syntax into authentication parameters. Attackers can submit a single quote followed by 'or' in the login form to bypass credential validation and gain unauthorized access to the application.