BaseFortify

Publication date: 2025-11-24

Last updated on: 2025-12-05

Assigner: MITRE

Description

A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2. There are Hard-coded configuration values.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-24

Last Modified

2025-12-05

Generated

2026-07-06

AI Q&A

2025-11-25

EPSS Evaluated

2026-07-05

NVD

CVE-2025-54341

Affected Vendors & Products

Vendor	Product	Version / Range
desktopalert	pingalert_application_server	From 6.1.0.11 (inc) to 6.1.1.6 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-798	The product contains hard-coded credentials, such as a password or cryptographic key.

Attack-Flow Graph

Executive Summary

This vulnerability involves hard-coded configuration values in the Application Server of Desktop Alert PingAlert versions 6.1.0.11 to 6.1.1.2. Hard-coded values can lead to security risks because they may expose sensitive information or reduce the ability to properly configure security settings.

Impact Analysis

The vulnerability can impact you by potentially exposing sensitive configuration details, which could be exploited by attackers to gain unauthorized access or reduce the security posture of the affected system. The CVSS score of 5.3 indicates a moderate severity with potential confidentiality impact but no impact on integrity or availability.

Hi! I’m here to help you understand CVE-2025-54341. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70