PT-2025-39630 · Unknown+2 · Compliance Guardian+2

CVE-2025-10544 · Publicado 2025-09-26 · Atualizado 2025-09-26

Positive Technologies (AI Summary)

CVSS v4.0

8.6

Alta

Vetor base

AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions DocAve versions prior to 6.13.2 Perimeter versions prior to 1.12.3 Compliance Guardian versions prior to 4.7.1

Description The software contains an unrestricted file upload issue that affects administrator users. The issue allows the upload of files without proper validation, potentially leading to system compromise. Additionally, a path traversal issue allows writing files to arbitrary directories within the web root.

Recommendations Update DocAve to version 6.13.2 or later. Update Perimeter to version 1.12.3 or later. Update Compliance Guardian to version 4.7.1 or later.

Correção

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2025-10544

Produtos afetados

Compliance Guardian

Docave

Perimeter

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-10544 · Nota de Segurança
• https://t.me/cveNotify/136516 · Publicação no Telegram
• https://twitter.com/offseq/status/1971523225281569274 · Publicação no Twitter
• https://t.me/CVEtracker/33452 · Publicação no Telegram
• https://twitter.com/VulmonFeeds/status/1971573606023942243 · Publicação no Twitter
• https://incibe.es/en/incibe-cert/notices/aviso/unrestricted-uploading-dangerous-file-types-avepoint-products · Nota
• https://twitter.com/CVEnew/status/1971539539568058637 · Publicação no Twitter