PT-2025-39158 · Anadolu Hayat Emeklilik · Ahe Mobile

Published 2025-09-23 · Updated 2025-09-23 · CVE-2025-9342

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Anadolu Hayat Emeklilik Inc. AHE Mobile versions 1.9.7 through 1.9.8

Description An issue exists in Anadolu Hayat Emeklilik Inc. AHE Mobile that allows for authorization bypass through a user-controlled key, potentially leading to privilege abuse.

Recommendations Update to AHE Mobile version 1.9.9 or later.

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2025-9342

Affected Products

Ahe Mobile

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-9342 · Security Note
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0287 · Note
• https://t.me/cveNotify/136126 · Telegram Post
• https://t.me/CVEtracker/33157 · Telegram Post
• https://usom.gov.tr/bildirim/tr-25-0287 · Note
• https://twitter.com/CVEnew/status/1970621822162083856 · Twitter Post