PT-2025-43630 · Cbk Soft · Envision

Emre Aktaş · Published 2025-10-24 · Updated 2025-10-29 · CVE-2025-11145

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions CBK Soft enVision versions prior to 250566

Description The software contains a flaw that allows Account Footprinting, potentially leading to the exposure of sensitive and private personal information to unauthorized actors. The issue involves an observable discrepancy that enables user enumeration.

Recommendations Update to version 250566 or later.

Fix

Side Channel Attack

Information Disclosure

Weakness Enumeration

CWE-359

CWE-203

CWE-200

Related Identifiers

CVE-2025-11145

Affected Products

Envision

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-11145 · Security Note
• https://t.me/CVEtracker/35685 · Telegram Post
• https://usom.gov.tr/bildirim/tr-25-0361 · Note
• https://twitter.com/cracbot/status/1983489042454089873 · Twitter Post
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0361 · Note