CVE-2025-46382
BaseFortify
Publication date: 2025-07-20
Last updated on: 2025-07-22
Assigner: Israel National Cyber Directorate
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-200 | The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is classified as CWE-200, which means it involves the exposure of sensitive information to an unauthorized actor. Essentially, it allows someone who should not have access to certain sensitive data to view or obtain that information.
How can this vulnerability impact me? :
The impact of this vulnerability is the unauthorized disclosure of sensitive information. This could lead to privacy breaches, loss of confidentiality, and potential misuse of the exposed data. However, it does not affect integrity or availability.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
Exposure of sensitive information to unauthorized actors can lead to non-compliance with data protection regulations such as GDPR and HIPAA, which require safeguarding personal and sensitive data. This vulnerability could result in violations of these standards due to unauthorized data disclosure.