CVE-2025-67789

An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5. Authenticated users can retrieve the computer count of other DriveLock tenants via the DriveLock API...

CVE-2025-67789

An improper access control vulnerability in DriveLock allows authenticated users to retrieve the computer count of other tenants via the DriveLock API . The root cause is insufficient access controls that permit unauthorized information disclosure through the API endpoint. Affected versions inclu...