PT-2025-30743 · Kron Pam · Kron Pam

Taha Yildirim + 1 · Publicado 2025-07-25 · Atualizado 2026-06-05 · CVE-2025-5253

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Kron PAM versions prior to 3.7

Description Kron PAM is susceptible to a denial-of-service (DoS) attack due to unrestricted resource allocation. This allows an attacker to exhaust system resources via HTTP requests.

Recommendations Update Kron PAM to version 3.7 or later.

Correção

DoS

Allocation of Resources Without Limits

Enumeração de Fraquezas

CWE-770

Identificadores relacionados

CVE-2025-5253

Produtos afetados

Kron Pam

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-5253 · Nota de Segurança
• https://usom.gov.tr/bildirim/tr-25-0178 · Nota
• https://t.me/cveNotify/166203 · Publicação no Telegram
• https://twitter.com/CVEnew/status/1948712642136227919 · Publicação no Twitter
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0178 · Nota