PT-2025-15972 · Videx · Videx Cyberaudit-Web

Hidde Smit + 1 · Published 2025-04-10 · Updated 2025-04-10 · CVE-2025-22375

Positive Technologies (AI Summary)

CVSS v4.0

9.3

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/S:N/AU:Y/R:A/V:D/RE:L/U:Green

Name of the Vulnerable Software and Affected Versions: Videx CyberAudit-Web versions prior to 9.5

Description: An authentication bypass issue was found, allowing an attacker to create a valid session without credentials by exploiting a logic flaw.

Recommendations: For versions prior to 9.5, update to a version later than 9.5, as a patch has been made available for all instances, including those that are End of Maintenance (EOM). If support is required, contact [e-mail] for assistance.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2025-22375

Affected Products

Videx Cyberaudit-Web

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-22375 · Security Note
• https://t.me/cvetracker/21316 · Telegram Post
• https://t.me/cvenotify/118573 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1910295886527181009 · Twitter Post
• https://t.me/cvedetector/22650 · Telegram Post
• https://twitter.com/cybercronai/status/1910366415393034581 · Twitter Post
• https://csirt.divd.nl/DIVD-2024-00043 · Note
• https://csirt.divd.nl/CVE-2025-22375 · Note
• https://twitter.com/CVEnew/status/1910296064135229754 · Twitter Post