VYPR
← All advisories
High severity7.3NVD Advisory· Published Mar 18, 2025· Updated Jun 17, 2026

CVE-2025-25585

CVE-2025-25585

Description

Incorrect access control in the component /config/WebSecurityConfig.java of yimioa before v2024.07.04 allows unauthorized attackers to arbitrarily modify Administrator passwords.

Affected products

2
  • yimioa/yimioacpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: <2024.07.04

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.