PT-2025-34610 · Unknown · System Pdv Version 1.0

R3Dd1T · Published 2025-08-25 · Updated 2025-08-29 · CVE-2025-45968

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: System PDV version 1.0

Description: The application contains an Insecure Direct Object Reference (IDOR) vulnerability due to a lack of proper authorization checks when accessing objects referenced by the hash parameter in a URL. This allows direct access to other users' data or internal resources without proper permission. Successful exploitation of this flaw may result in the exposure of sensitive information.

Recommendations: Ensure proper authorization checks are implemented when accessing objects referenced by the hash parameter.

Exploit

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2025-45968

Affected Products

System Pdv Version 1.0

References · 6

• 🔥 https://medium.com/@r3dd1t/pedindo-um-lanche-e-possivelemnte-descobrindo-uma-cve-9930b0114e3f · Exploit
• https://osv.dev/vulnerability/CVE-2025-45968 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-45968 · Security Note
• https://twitter.com/CVEnew/status/1959983168439591037 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1960069133069902229 · Twitter Post
• https://twitter.com/cracbot/status/1961383389833134584 · Twitter Post