CVE-2025-68392 : Detail

CVE-2025-68392

2026-10-30
12h16 +00:00
Authorization problems
A01-Broken Access Control
2026-11-04
22h10 +00:00
Notifikasi untuk CVE tertentu
Tetap terinformasi tentang perubahan untuk CVE tertentu.
Kelola notifikasi

Deskripsi CVE

ARKETEAM Protectel modules PROTECTELMAJ and BDF allow low privileged users to use some of the functionalities reserved for admin users by forging direct requests to a specific endpoint.  This issue has been fixed in: PROTECTELMAJ v6.5.19 and BDF v6.4.67

Informasi CVE

Kelemahan Terkait

CWE-ID Nama Kelemahan Sumber
CWE-863 Incorrect Authorization
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Referensi