PT-2025-22348 · Unknown · Proget Mdm

Marcin Węgłowski · Published 2025-05-21 · Updated 2026-04-22 · CVE-2025-1416

Positive Technologies (AI Summary)

CVSS v4.0

7.0

High

Base vector

AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:N

Name of the Vulnerable Software and Affected Versions Proget MDM (affected versions not specified)

Description The issue concerns a privilege escalation in Proget MDM, where a low-privileged user can retrieve passwords for managed devices. This allows the user to access functionalities restricted by the MDM.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2025-1416

Affected Products

Proget Mdm

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-1416 · Security Note
• https://cert.pl/en/posts/2025/05/CVE-2025-1415 · Note
• https://proget.pl/en/mobile-device-management · Note
• https://twitter.com/VulmonFeeds/status/1925230139220144277 · Twitter Post
• https://twitter.com/afinePL/status/2046953515889676376 · Twitter Post
• https://twitter.com/CVEnew/status/1925185824003338298 · Twitter Post
• https://t.me/latest_high_impact_cve/2433 · Telegram Post