PT-2025-44421 · Adforest · Adforest

Published 2025-10-30 · Updated 2025-10-30 · CVE-2025-61116

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions AdForest - Classified Android App version 4.0.12

Description The AdForest - Classified Android App has an issue with how it controls access during authentication. The application utilizes a Base64-encoded email address as an authorization credential. This method can be exploited by attackers to gain unauthorized access to user accounts. Successful exploitation may lead to account compromise and privacy breaches. The vulnerable parameter is the Base64-encoded email address used for authorization.

Recommendations Update to a newer version that addresses the improper access control in the authentication mechanism.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2025-61116

Affected Products

Adforest

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-61116 · Security Note
• https://t.me/CVEtracker/36204 · Telegram Post
• https://twitter.com/CVEnew/status/1983925241077207315 · Twitter Post
• https://kar1oz.notion.site/AdForest-Classified-2629a473ecb2806cb787d3654f3e50b8 · Note