PT-2025-47890 · Atisoluciones · Atisoluciones Ciges Application

Published 2025-11-24 · Updated 2025-11-24 · CVE-2025-13596

Positive Technologies (AI Summary)

CVSS v4.0

2.7

Low

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:U/V:D/RE:X/U:Clear

Name of the Vulnerable Software and Affected Versions ATISoluciones CIGES Application versions prior to 2.15.6

Description A sensitive information disclosure issue exists in the error handling component. When unexpected conditions cause unhandled exceptions, the application returns detailed error messages and stack traces to the client. This could expose internal filesystem paths, SQL queries, database connection details, or environment configuration data to remote, unauthenticated attackers. This allows information gathering and reconnaissance.

Recommendations Update ATISoluciones CIGES Application to version 2.15.6 or later.

Fix

Generation of Error Message Containing Sensitive Information

Information Disclosure

Weakness Enumeration

CWE-209

CWE-200

Related Identifiers

CVE-2025-13596

Affected Products

Atisoluciones Ciges Application

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-13596 · Security Note
• https://twitter.com/CVEnew/status/1992863376238661915 · Twitter Post
• https://t.me/CVEtracker/38061 · Telegram Post
• https://atisoluciones.com/incidentes-cve · Note
• https://t.me/cveNotify/143751 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1992877029855838646 · Twitter Post