CVE-2025-55047
BaseFortify
Publication date: 2025-09-09
Last updated on: 2025-09-11
Assigner: Israel National Cyber Directorate
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-798 | The product contains hard-coded credentials, such as a password or cryptographic key. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability involves the use of hard-coded credentials within software or systems, which means that fixed usernames and passwords are embedded in the code. This practice can allow unauthorized users to gain access if they discover these credentials, as they cannot be changed easily.
How can this vulnerability impact me? :
The vulnerability can lead to unauthorized access to systems or data, potentially resulting in full compromise of confidentiality, integrity, and availability. Attackers exploiting hard-coded credentials can gain elevated privileges and control over affected systems.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
Use of hard-coded credentials can lead to unauthorized data access and breaches, which may violate data protection requirements under standards like GDPR and HIPAA, potentially resulting in non-compliance and legal consequences.