CVEvulnerability

CVE-2025-59785

5.3 MEDIUM Published 2026-03-04 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2026-03-04
Last modified
2026-06-17
Assigner
be69f613-e5f6-419b-800c-30351aa8933c
CVSS 4.0 (be69f613-e5f6-419b-800c-30351aa8933c)
5.3 MEDIUM — CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1 ([email protected])
7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-1286

Description

Improper validation of API end-point in 2N Access Commander version 3.4.2 and prior allows attacker to bypass password policy for backup file encryption. This vulnerability can only be exploited after authenticating with administrator privileges.

Affected configurations

• 2n access commander (< 3.5)

Related

Weakness · CWE (1)

  • CWE-1286 Improper Validation of Syntactic Correctness of Input weakness

References