CVE-2025-66698

CVE-2025-66698 대상 소프트웨어: Veda Semantic Machines v5.4.8 이전 버전 대부분 포함. 취약점 유형: 인증 우회. CVE ID: CVE-2025-66698. 요약: 시스템이 ticket 매개변수를 부적절하게 검증하여, 빈 문자열을 유효한 세션으로 처리합니다. 프로젝트 링크: Veda Semantic Machines 2025년 11월 18일: 발견 및 초기 CVE 요청. 2026년 1월 9일: CVE ID 할당. 공급업체에 연락 시도 무시 및 삭제됨. 2026년 1월 13일: 공급업체의 응답...

CVE-2025-66698

An issue in Semantic machines v5.4.8 allows attackers to bypass authentication via sending a crafted HTTP request to various API endpoints...

CVE-2025-66698

An issue in Semantic machines v5.4.8 allows attackers to bypass authentication via sending a crafted HTTP request to various API endpoints...

CVE-2025-66698

An issue in Semantic machines v5.4.8 allows attackers to bypass authentication via sending a crafted HTTP request to various API endpoints...

CVE-2025-66698

An issue in Semantic machines v5.4.8 allows attackers to bypass authentication via sending a crafted HTTP request to various API endpoints...

CVE-2025-66698

An authentication bypass vulnerability exists in Semantic machines v5.4.8 (which may include all previous versions) due to a flaw in the validation of the ticket parameter. The system incorrectly treats an empty string as a valid session, allowing attackers to bypass security checks by sending cr...

CVE-2025-66698

An issue in Semantic machines v5.4.8 allows attackers to bypass authentication via sending a crafted HTTP request to various API endpoints...

PT-2026-2487

Name of the Vulnerable Software and Affected Versions Semantic machines version 5.4.8 Description An issue allows attackers to bypass authentication by sending a crafted HTTP request to various API endpoints. The attack targets authentication mechanisms within the software. The affected API...

CVE-2025-66698: Improper Authentication

An issue in Semantic machines v5.4.8 allows attackers to bypass authentication via sending a crafted HTTP request to various API endpoints...