PT-2025-46330 · Unknown · Perfektive

Ferit Özner · CVE-2025-10161 · Published 2025-11-11 · Updated 2025-11-11

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Perfektive versions prior to 12574 Build 2701

Description The software exhibits issues related to improper restriction of excessive authentication attempts, client-side enforcement of server-side security, and reliance on untrusted inputs in a security decision. This can lead to brute force attacks, authentication bypass, and functionality bypass. The issue is associated with CWE-307, CWE-602, and CWE-807.

Recommendations Update Perfektive to version 12574 Build 2701 or later.

Fix

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

CWE-807

CWE-602

Related Identifiers

CVE-2025-10161

Affected Products

Perfektive

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-10161 · Security Note
• https://twitter.com/CVEnew/status/1988241214119047203 · Twitter Post
• https://usom.gov.tr/bildirim/tr-25-0387 · Note
• https://twitter.com/FeritOzner/status/1988265824004493411 · Twitter Post
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0387 · Note
• https://t.me/CVEtracker/37030 · Telegram Post