CVE-2025-4378
BaseFortify
Publication date: 2025-06-24
Last updated on: 2025-06-26
Assigner: Computer Emergency Response Team of the Republic of Turkey
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-798 | The product contains hard-coded credentials, such as a password or cryptographic key. |
| CWE-319 | The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in the Ataturk University ATA-AOF Mobile Application involves cleartext transmission of sensitive information and the use of hard-coded credentials. These issues allow attackers to abuse authentication mechanisms and bypass authentication controls, potentially gaining unauthorized access to the application.
How can this vulnerability impact me? :
The vulnerability can lead to severe impacts including unauthorized access to sensitive information, compromise of user accounts, and potential manipulation or disruption of application functionality. Given the high CVSS score of 10.0, it poses a critical risk to confidentiality, integrity, and availability.