BaseFortify

Publication date: 2025-10-22

Last updated on: 2025-11-13

Assigner: Patchstack

Description

Authentication Bypass Using an Alternate Path or Channel vulnerability in quantumcloud Simple Link Directory qc-simple-link-directory allows Authentication Abuse.This issue affects Simple Link Directory: from n/a through < 14.8.1.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-22

Last Modified

2025-11-13

Generated

2026-07-06

AI Q&A

2025-10-22

EPSS Evaluated

2026-07-05

NVD

CVE-2025-49901

Affected Vendors & Products

Vendor	Product	Version / Range
quantumcloud	simple_link_directory	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-288	The product requires authentication, but the product has an alternate path or channel that does not require authentication.

Attack-Flow Graph

Executive Summary

This vulnerability is an Authentication Bypass Using an Alternate Path or Channel in the quantumcloud Simple Link Directory (qc-simple-link-directory). It allows attackers to abuse the authentication mechanism, potentially gaining unauthorized access.

Impact Analysis

The vulnerability can allow attackers to bypass authentication controls, leading to unauthorized access to the affected system or data, which may result in data breaches or other security incidents.

Hi! I’m here to help you understand CVE-2025-49901. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70