PT-2025-44596 · Unknown · Therefore Online+2

Published 2025-10-31 · Updated 2025-10-31 · CVE-2025-11843

Positive Technologies (AI Summary)

CVSS v4.0

8.8

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Therefore Online (affected versions not specified) Therefore On-Premises (affected versions not specified)

Description A malicious user may be able to impersonate the web service account or the account of a service using the API when connecting to the Therefore Server. Successful impersonation at the application level could allow access to documents stored within Therefore. This is not an operating system level impersonation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Authentication Bypass by Spoofing

Weakness Enumeration

CWE-290

Related Identifiers

CVE-2025-11843

Affected Products

Therefore On-Premises

Therefore Online

Therefore Server

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-11843 · Security Note
• https://canon-europe.com/psirt/advisory-information · Vendor Advisory
• https://twitter.com/CVEnew/status/1984211886246900182 · Twitter Post
• https://t.me/cveNotify/141092 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1984234502650998974 · Twitter Post