Beveiligingsadvies

CVE-2025-40668

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-06-09 12:25:59

Laatst bijgewerkt 2025-06-09 13:03:21

Toegewezen door INCIBE

CVSS-score 7.1

Status PUBLISHED

Beschrijving

Incorrect authorization vulnerability in TCMAN's GIM v11. This vulnerability allows an attacker, with low privilege level, to change the password of other users through a POST request using the parameters idUser, PasswordActual, PasswordNew and PasswordNewRepeat in /PC/WebService.aspx/validateChangePassword%C3%B1a. To exploit the vulnerability the PasswordActual parameter must be empty.

← Alle CVE's bekijken Bekijk op cve.org ↗