CVE-2025-8463
BaseFortify
Publication date: 2025-09-17
Last updated on: 2025-09-30
Assigner: Computer Emergency Response Team of the Republic of Turkey
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| sechard | sechard | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-639 | The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an Authorization Bypass Through User-Controlled Key in Nebula Informatics SecHard, which allows Parameter Injection. It requires only low privileges, such as a user, to exploit. It affects versions of SecHard before 3.6.2-20250805.
How can this vulnerability impact me? :
The vulnerability can lead to unauthorized access or actions by bypassing authorization controls through parameter injection. Although it requires low privileges to exploit, it can result in a high impact on confidentiality, potentially exposing sensitive information.