CVE-2025-55052
BaseFortify
Publication date: 2025-09-09
Last updated on: 2025-09-11
Assigner: Israel National Cyber Directorate
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-200 | The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is classified as CWE-200, which means it involves the exposure of sensitive information to an unauthorized actor. Essentially, it allows someone who should not have access to certain sensitive data to view it.
How can this vulnerability impact me? :
The impact of this vulnerability is limited to the unauthorized disclosure of sensitive information. According to the CVSS score, it has a low severity with a Base Score of 4.3, indicating that it could lead to some information leakage but does not affect integrity or availability.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
Exposure of sensitive information to unauthorized actors can lead to non-compliance with data protection regulations such as GDPR and HIPAA, which require safeguarding personal and sensitive data. This vulnerability could therefore pose a risk to compliance by potentially allowing unauthorized access to protected information.