PT-2026-29529 · Sage Dpw · Sage Dpw

Published 2026-04-01 · Updated 2026-04-01 · CVE-2025-67806

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Sage DPW versions prior to 2021 06 000

Description The login mechanism exhibits different responses for valid and invalid usernames, potentially allowing the enumeration of existing accounts. On-premise administrators can disable this behavior in newer versions.

Recommendations Update to version 2021 06 000 or later.

Fix

Side Channel Attack

Weakness Enumeration

CWE-203

Related Identifiers

CVE-2025-67806

Affected Products

Sage Dpw

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-67806 · Security Note
• https://sagedpw.at · Note
• https://twitter.com/CVEnew/status/2039372072938308005 · Twitter Post
• https://pastebin.com/Tk4LgMG2 · Note