CVE-2025-40670

Incorrect authorization vulnerability in TCMAN's GIM v11. This vulnerability allows an unprivileged attacker to create a user and assign it many privileges by sending a POST request to /PC/frmGestionUser.aspx/updateUser...

CVE-2025-40670

Incorrect authorization vulnerability in TCMAN's GIM v11. This vulnerability allows an unprivileged attacker to create a user and assign it many privileges by sending a POST request to /PC/frmGestionUser.aspx/updateUser...

CVE-2025-40670

creationtimestamp| type| source ---|---|--- 2025-06-09 13:02:03+00:00| published-proof-of-concept| Telegram/AvRPE1FYyApk1Jln3Af0piOZ09oDjaUbhCE1oirCL83hBqc 2025-06-09 15:45:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr6pvtlda52k...

CVE-2025-40670

CVE-2025-40670 affects TCMAN GIM v11. The vulnerability is an incorrect authorization flaw that allows an unprivileged attacker to create a user and assign it many privileges by sending a POST to /PC/frmGestionUser.aspx/updateUser. Affected software and component: TCMAN GIM v11, web-based user-ma...

CVE-2025-40670 Incorrect Authorization vulnerability in TCMAN GIM

Incorrect authorization vulnerability in TCMAN's GIM v11. This vulnerability allows an unprivileged attacker to create a user and assign it many privileges by sending a POST request to /PC/frmGestionUser.aspx/updateUser...

CVE-2025-40670 Incorrect Authorization vulnerability in TCMAN GIM

Incorrect authorization vulnerability in TCMAN's GIM v11. This vulnerability allows an unprivileged attacker to create a user and assign it many privileges by sending a POST request to /PC/frmGestionUser.aspx/updateUser...