CVE-2025-67789

An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5. Authenticated users can retrieve the computer count of other DriveLock tenants via the DriveLock API...

CVE-2025-67789

DriveLock, an endpoint security and data protection platform, contains an information disclosure vulnerability in versions 24.1 before 24.1.6 , 24.2 before 24.2.7 , and 25.1 before 25.1.5 . The root cause is insufficient access controls within the DriveLock API , which allows authenticated users ...