Home

Description

ABC Fine Wine & Spirits Android App version v.11.27.5 and before (package name com.cta.abcfinewineandspirits), developed by ABC Liquors, Inc., contains an improper access control vulnerability in its login mechanism. The application does not properly validate user passwords during authentication, allowing attackers to bypass login checks and obtain valid session identifiers. Successful exploitation could result in unauthorized account access, privacy breaches, and misuse of the platform.

PUBLISHED Reserved 2025-09-26 | Published 2025-10-30 | Updated 2025-10-30 | Assigner mitre

References

kar1oz.notion.site/...irits-2629a473ecb2807787e2f2557e504c7d

cve.org (CVE-2025-61115)

nvd.nist.gov (CVE-2025-61115)

Download JSON