Vulnerabilities > CVE-2025-23190

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
LOW
Integrity impact
NONE
Availability impact
NONE
network
low complexity
CWE-862
NVD
Published: 2025-02-11
Updated: 2025-02-11

Summary

Due to missing authorization check, an authenticated attacker could call a remote-enabled function module which allows them to access data that they would otherwise not have access to. The attacker cannot modify data or impact the availability of the system.

Common Weakness Enumeration (CWE)

References