PT-2025-46951 · Unknown · Optimus Software Brokerage Automation

CVE-2025-8855 · Publicado 2025-11-14 · Atualizado 2025-11-17

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Optimus Software Brokerage Automation versions prior to 1.1.71

Description The software contains flaws related to authentication bypass and authorization. The issue involves exploiting trust in client data and manipulating registry information. A weak password recovery mechanism for forgotten passwords and an authorization bypass through a user-controlled key are present.

Recommendations Update Optimus Software Brokerage Automation to version 1.1.71 or later.

Correção

IDOR

Enumeração de Fraquezas

CWE-639

CWE-302

CWE-640

Identificadores relacionados

CVE-2025-8855

Produtos afetados

Optimus Software Brokerage Automation

Referências · 9

• https://t.me/cveNotify/142775 · Publicação no Telegram
• https://twitter.com/CveTodo/status/1989324525754802656 · Publicação no Twitter
• https://t.me/CVEtracker/37326 · Publicação no Telegram
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0396 · Nota
• https://twitter.com/Cyberwarzonecom/status/1990248944589304205 · Publicação no Twitter
• https://twitter.com/CVEnew/status/1989355881713336604 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/1989330291421249604 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-8855 · Nota de Segurança
• https://usom.gov.tr/bildirim/tr-25-0396 · Nota