CVEvulnerability

CVE-2025-3113

9.0 CRITICAL Published 2025-04-17 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2025-04-17
Last modified
2026-06-17
Assigner
[email protected]
CVSS 4.0 ([email protected])
9.0 CRITICAL — CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weaknesses
CWE-284

Description

A valid, authenticated user with sufficient privileges and who is aware of Continuous Compliance’s internal database configurations can leverage the application’s built-in Connector functionality to access Continuous Compliance’s internal database. This allows the user to explore the internal database schema and export its data, including the properties of Connecters and Rule Sets.

Related

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References