PT-2025-9083 · Unknown · Foreseer Reporting

Published 2025-02-28 · Updated 2025-02-28 · CVE-2025-22492

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions Foreseer Reporting Software (FRS) versions prior to 1.5.100

Description The issue allows users with access to the FRSCore database on the Foreseer Reporting Software (FRS) VM to view the connection string, which can be used to gain administrative access to the 4crXref database.

Recommendations For versions prior to 1.5.100, update to version 1.5.100 to resolve the issue.

Fix

Insecure Storage of Sensitive Information

Weakness Enumeration

CWE-922

Related Identifiers

CVE-2025-22492

Affected Products

Foreseer Reporting

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-22492 · Security Note
• https://eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/etn-va-2024-1009.pdf · Note
• https://twitter.com/cybercronai/status/1895591154944463210 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1895439243352195158 · Twitter Post
• https://t.me/cvedetector/19134 · Telegram Post
• https://twitter.com/CVEnew/status/1895619324435726536 · Twitter Post