PT-2025-27569 · Ullu · Ullu

Ishwar Kumar · Published 2025-07-01 · Updated 2025-07-01 · CVE-2025-45083

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L

Name of the Vulnerable Software and Affected Versions: Ullu versions 2.9.929 (Android) and 2.8.0 (IOS)

Description: The issue is related to incorrect access control, allowing attackers to bypass the parental pin feature via unspecified vectors.

Recommendations: For Ullu version 2.9.929 (Android) and version 2.8.0 (IOS), consider restricting access to sensitive features until a patch is available. As a temporary workaround, consider disabling the parental pin bypass feature until a fix is released. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2025-45083

Affected Products

Ullu

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-45083 · Security Note
• https://twitter.com/CVEnew/status/1940120774926360818 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1940171368621842796 · Twitter Post
• https://pastebin.com/mFM1a3CP · Note