PT-2026-41009 · Yordam Information Technology Consulting · Library Automation System

Publicado 2026-05-14 · Atualizado 2026-05-14 · CVE-2025-15023

NVD

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Incorrect Authorization vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Automation System allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects Library Automation System: from v.19.5 before v.22.1.

Correção

Incorrect Authorization

Enumeração de Fraquezas

CWE-863

Identificadores relacionados

CVE-2025-15023

Produtos afetados

Library Automation System

Referências · 2

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0240 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-15023 · Nota de Segurança