CVE-2025-11959
BaseFortify
Publication date: 2025-11-11
Last updated on: 2025-11-11
Assigner: Computer Emergency Response Team of the Republic of Turkey
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| premierturk_information_technologies_inc | excavation_management_information_system | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-552 | The product makes files or directories accessible to unauthorized actors, even though they should not be. |
| CWE-359 | The product does not properly prevent a person's private, personal information from being accessed by actors who either (1) are not explicitly authorized to access the information or (2) do not have the implicit consent of the person about whom the information is collected. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in Premierturk Information Technologies Inc. Excavation Management Information System allows unauthorized external parties to access files or directories that should be private. This exposure can lead to unauthorized actors obtaining private personal information through footprinting and misuse of system functionality.
How can this vulnerability impact me? :
The vulnerability can lead to unauthorized disclosure of private personal information, potentially resulting in data breaches, loss of confidentiality, and misuse of sensitive data. This can harm individuals' privacy and damage the organization's reputation and trustworthiness.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
This vulnerability can negatively impact compliance with standards and regulations such as GDPR and HIPAA, which require protection of personal and sensitive information. Exposure of private personal data to unauthorized actors may lead to violations of these regulations, resulting in legal and financial consequences.