PT-2025-27567 · Sbi · Yono Sbi: Banking & Lifestyle

Ishwar Kumar · CVE-2025-45080 · Published 2025-07-01 · Updated 2025-12-15

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: YONO SBI: Banking & Lifestyle version 1.23.36

Description: The issue is related to the use of unencrypted communications, which could potentially allow attackers to execute a man-in-the-middle attack.

Recommendations: For YONO SBI: Banking & Lifestyle version 1.23.36, consider disabling the use of unencrypted communications until a patch is available. Restrict access to sensitive information to minimize the risk of exploitation.

Fix

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

CVE-2025-45080

Affected Products

Yono Sbi: Banking & Lifestyle

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-45080 · Security Note
• https://twitter.com/briskinfosec/status/1941462033800757573 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1ltqd8x/top_10_trending_cves_07072025 · Reddit Post
• https://twitter.com/hetmehtaa/status/1941093142083633298 · Twitter Post
• https://twitter.com/grok/status/2000497998023844307 · Twitter Post
• https://twitter.com/grok/status/1958170927163920833 · Twitter Post
• https://twitter.com/CVEnew/status/1940120773156290594 · Twitter Post
• https://twitter.com/H4r5h_T4nd37/status/1941147967886631117 · Twitter Post
• https://pastebin.com/z2gmGWP9 · Note