Security Advisory

CVE-2025-40670

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-06-09 12:26:28

Last updated 2025-06-09 13:01:52

Assigner INCIBE

CVSS score 7.1

State PUBLISHED

Description

Incorrect authorization vulnerability in TCMAN's GIM v11. This vulnerability allows an unprivileged attacker to create a user and assign it many privileges by sending a POST request to /PC/frmGestionUser.aspx/updateUser.

← Browse all CVEs View on cve.org ↗