CVE-2025-2311 | THREATINT

Description

Incorrect Use of Privileged APIs, Cleartext Transmission of Sensitive Information, Insufficiently Protected Credentials vulnerability in Sechard Information Technologies SecHard allows Authentication Bypass, Interface Manipulation, Authentication Abuse, Harvesting Information via API Event Monitoring.This issue affects SecHard: before 3.3.0.20220411.

Reserved 2025-03-14 | Published 2025-03-20 | Updated 2025-03-21 | Assigner TR-CERT

CRITICAL: 9.0CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Problem types

CWE-648 Incorrect Use of Privileged APIs

CWE-319 Cleartext Transmission of Sensitive Information

CWE-522 Insufficiently Protected Credentials

Product status

Default status

unaffected

Any version before 3.3.0.20220411

affected

Credits

Berat Ugur DEMIRKAN finder

BG-TEK Cyber Security sponsor

References

www.usom.gov.tr/bildirim/tr-25-0074 third-party-advisory

cve.org (CVE-2025-2311)

nvd.nist.gov (CVE-2025-2311)

Download JSON