CVE-2025-25585

Incorrect access control in the component /config/WebSecurityConfig.java of yimioa before v2024.07.04 allows unauthorized attackers to arbitrarily modify Administrator passwords...

CVE-2025-25585

creationtimestamp| type| source ---|---|--- 2025-03-18 18:13:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkobid4qef26...

CVE-2025-25585

Incorrect access control in the component /config/WebSecurityConfig.java of yimioa before v2024.07.04 allows unauthorized attackers to arbitrarily modify Administrator passwords...

CVE-2025-25585

Incorrect access control in the component /config/WebSecurityConfig.java of yimioa before v2024.07.04 allows unauthorized attackers to arbitrarily modify Administrator passwords...

CVE-2025-25585

The yimioa (CloudNet OA) software, specifically versions prior to v2024.07.04 , is vulnerable to an incorrect access control flaw in the /config/WebSecurityConfig.java component. This vulnerability allows an unauthorized attacker to arbitrarily modify Administrator passwords , potentially leading...