CVEvulnerability

CVE-2025-2311

9.0 CRITICAL Published 2025-03-20 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2025-03-20
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.0 CRITICAL — CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Weaknesses
CWE-319, CWE-522, CWE-648

Description

Incorrect Use of Privileged APIs, Cleartext Transmission of Sensitive Information, Insufficiently Protected Credentials vulnerability in Sechard Information Technologies SecHard allows Authentication Bypass, Interface Manipulation, Authentication Abuse, Harvesting Information via API Event Monitoring. This issue affects SecHard: before 3.3.0.20220411.

Related

Weakness · CWE (3)

  • CWE-319 Cleartext Transmission of Sensitive Information weakness
  • CWE-522 Insufficiently Protected Credentials weakness
  • CWE-648 Incorrect Use of Privileged APIs weakness

References