PT-2025-17975 · Goldendb · Goldendb

Published 2025-04-27 · Updated 2025-04-27 · CVE-2025-46576

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions GoldenDB (affected versions not specified)

Description The issue concerns a Permission Management and Access Control problem, allowing attackers to manipulate requests and bypass privilege restrictions. This can lead to unauthorized deletion of content.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2025-46576

Affected Products

Goldendb

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-46576 · Security Note
• https://osv.dev/vulnerability/CVE-2025-46576 · Vendor Advisory
• https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/1036467615091601464 · Vendor Advisory
• https://t.me/cvenotify/119931 · Telegram Post
• https://t.me/cvetracker/22435 · Telegram Post
• https://t.me/cvedetector/23822 · Telegram Post
• https://twitter.com/CVEnew/status/1916323904089452963 · Twitter Post