PT-2025-47390 · Unknown · Web-Based Management Interface

Dugisan3Rd · Published 2025-11-18 · Updated 2025-11-19 · CVE-2025-37160

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions versions prior to 2025-37160

Description A broken access control (BAC) exists in the web-based management interface. An authenticated remote attacker with low privileges may be able to view sensitive information. Successful exploitation could lead to the disclosure of sensitive data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2025-37160

Affected Products

Web-Based Management Interface

References · 7

• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04888en_us&docLocale=en_US · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-37160 · Security Note
• https://osv.dev/vulnerability/CVE-2025-37160 · Vendor Advisory
• https://twitter.com/CVEnew/status/1991042946104168650 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1991040888441622720 · Twitter Post
• https://t.me/cveNotify/143248 · Telegram Post
• https://t.me/CVEtracker/37655 · Telegram Post