10 matches found
CVE-2025-69428
安全公告 - CVE-2025-69428 标题： 未经验证访问敏感目录（信息泄露） CVE编号： CVE-2025-69428 描述 在本地部署的Pro-Bit应用程序（版本低于v1.77.4）中存在一个严重的访问控制漏洞，允许未经验证的攻击者直接访问敏感目录及其子目录。 该目录可公开访问，无需任何身份验证或授权检查。其中包含高度敏感的文件，包括： 明文用户凭证及对应的域账户 数据库连接字符串 内部主机信息 加密方法、密钥以及加密的服务用户密码 攻击者可能利用这些信息进一步入侵系统。 状态： 已由供应商修补。 披露时间线： 报告日期：2025年12月4日...
CVE-2025-69428
An issue in Pro-Bit before v1.77.4 allows unauthenticated attackers to directly access sensitive directory and its subdirectories...
CVE-2025-69428
An issue in Pro-Bit before v1.77.4 allows unauthenticated attackers to directly access sensitive directory and its subdirectories...
Pro-Bit 安全漏洞
Pro-Bit is an enterprise management system developed by Pro-Bit company in Slovenia. Versions of Pro-Bit prior to 1.77.4 contained a security vulnerability, which allowed unverified attackers to directly access sensitive directories and their subdirectories...
CVE-2025-69428
An issue in Pro-Bit before v1.77.4 allows unauthenticated attackers to directly access sensitive directory and its subdirectories...
CVE-2025-69428
Pro-Bit vulnerability CVE-2025-69428: Affected software is Pro-Bit before v1.77.4. Unauthenticated attackers can directly access a sensitive directory and its subdirectories. Root cause details are not explicitly described beyond the access to the directory tree. The CVE has a CVSS v3.1 base scor...
CVE-2025-69428
An issue in Pro-Bit before v1.77.4 allows unauthenticated attackers to directly access sensitive directory and its subdirectories...
PT-2026-35514
CVE-2025-69428 An issue in Pro-Bit before v1.77.4 allows unauthenticated attackers to directly access sensitive directory and its subdirectories. https://t.co/JqzY6tQLxL...
