PT-2025-17579 · Codemers · Codemers Klims

Published 2025-04-22 · Updated 2025-04-23 · CVE-2025-43947

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Codemers KLIMS version 1.6.DEV

Description The issue is related to a lack of proper access control mechanism, allowing a normal user to perform actions that are typically restricted to administrators. This includes modifying the configuration, creating users, uploading files, and other administrative tasks.

Recommendations For Codemers KLIMS version 1.6.DEV, consider restricting access to sensitive features and administrative tasks until a proper access control mechanism is implemented. As a temporary workaround, limit the actions that normal users can perform to minimize the risk of unauthorized modifications or data uploads.

Exploit

Fix

LPE

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2025-43947

Affected Products

Codemers Klims

References · 8

• 🔥 https://github.com/Henkel-CyberVM/CVEs/tree/main/CVE-2025-43947 · Exploit
• https://osv.dev/vulnerability/CVE-2025-43947 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-43947 · Security Note
• https://t.me/cvedetector/23545 · Telegram Post
• https://t.me/cvetracker/22154 · Telegram Post
• https://de.linkedin.com/company/codemers · Note
• https://twitter.com/CVEnew/status/1914746242736783751 · Twitter Post
• https://twitter.com/cybercronai/status/1915182795787247831 · Twitter Post