CVE-2025-34156: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Tibbo AggreGate Network Manager 6.40.05 exposes sensitive system information through an unauthenticated endpoint at /cwmp/happyaxis.jsp. The page discloses Java system properties, server path details, and version information to unauthorized users, resulting in information disclosure that could ai...

PT-2025-43533

Name of the Vulnerable Software and Affected Versions Tibbo AggreGate Network Manager versions prior to 6.40.05 Description The software reveals sensitive system information through an unauthenticated endpoint. Specifically, the /cwmp/happyaxis.jsp endpoint allows unauthorized access to Java syst...