CVEvulnerability

CVE-2025-63747

9.8 CRITICAL Published 2025-11-17 Modified 2026-07-05 Official page ↗
Status
Modified
Published
2025-11-17
Last modified
2026-07-05
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-521

Description

QaTraq 6.9.2 ships with administrative account credentials which are enabled in default installations and permit immediate login via the web application login page. Because the account provides administrative privileges in the default configuration, an attacker who can reach the login page can gain administrative access.

Affected configurations

• testmanagement qatraq 6.9.2

Related

Weakness · CWE (1)

  • CWE-521 Weak Password Requirements weakness

References