Files
vuln-nvd/data/2025/CVE-2025-4378.json
T

2 lines
2.1 KiB
JSON

{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"ATA-AOF Mobile Application","vendor":"Ataturk University","versions":[{"lessThan":"20.06.2025","status":"affected","version":"0","versionType":"custom"}]}],"source":"iletisim@usom.gov.tr"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Cleartext Transmission of Sensitive Information, Use of Hard-coded Credentials vulnerability in Ataturk University ATA-AOF Mobile Application allows Authentication Abuse, Authentication Bypass.\n\nThis issue affects ATA-AOF Mobile Application: before 20.06.2025."},{"lang":"es","value":"La vulnerabilidad de transmisión de información confidencial en texto claro y uso de credenciales codificadas en Ataturk University ATA-AOF Mobile Application permite el abuso y la omisión de la autenticación. Este problema afecta a la aplicación móvil ATA-AOF: antes del 20.06.2025."}],"id":"CVE-2025-4378","lastModified":"2026-06-17T09:33:09.077","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":10.0,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L","version":"3.1"},"exploitabilityScore":3.9,"impactScore":6.0,"source":"iletisim@usom.gov.tr","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-4378","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2025-06-25T13:40:51.291402Z","version":"2.0.3"}}]},"published":"2025-06-24T17:15:35.320","references":[{"source":"iletisim@usom.gov.tr","url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0135"},{"source":"iletisim@usom.gov.tr","url":"https://www.usom.gov.tr/bildirim/tr-25-0135"}],"sourceIdentifier":"iletisim@usom.gov.tr","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-319"},{"lang":"en","value":"CWE-798"}],"source":"iletisim@usom.gov.tr","type":"Secondary"}]}