PT-2025-30276 · Pavo Pay · Pavo Pay

Published 2025-07-21 · Updated 2025-07-21 · CVE-2025-4130

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions PAVO Pay versions prior to 13.05.2025

Description A use of hard-coded credentials issue exists in PAVO Pay, allowing the reading of sensitive constants within an executable.

Recommendations Update PAVO Pay to version 13.05.2025 or later.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2025-4130

Affected Products

Pavo Pay

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-4130 · Security Note
• https://twitter.com/CVEnew/status/1947300337989067074 · Twitter Post
• https://t.me/cvenotify/129691 · Telegram Post
• https://usom.gov.tr/bildirim/tr-25-0166 · Note