CVE-2025-25585

Incorrect access control in the component /config/WebSecurityConfig.java of yimioa before v2024.07.04 allows unauthorized attackers to arbitrarily modify Administrator passwords...

CVE-2025-25585

creationtimestamp| type| source ---|---|--- 2025-03-18 18:13:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkobid4qef26...

CVE-2025-25585

Incorrect access control in the component /config/WebSecurityConfig.java of yimioa before v2024.07.04 allows unauthorized attackers to arbitrarily modify Administrator passwords...

CVE-2025-25585

Incorrect access control in the component /config/WebSecurityConfig.java of yimioa before v2024.07.04 allows unauthorized attackers to arbitrarily modify Administrator passwords...

CVE-2025-25585

CVE-2025-25585 affects yimioa prior to v2024.07.04. The vulnerability is in the component /config/WebSecurityConfig.java and is caused by incorrect access control, enabling unauthorized attackers to arbitrarily modify the administrator password. The CVE details from multiple sources align on this...