CVE-2025-62189
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-11-21

Last updated on: 2025-12-04

Assigner: JPCERT/CC

Description
LogStare Collector contains an incorrect authorization vulnerability in UserRegistration. If exploited, a non-administrative user may create a new user account by sending a crafted HTTP request.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-11-21
Last Modified
2025-12-04
Generated
2026-06-16
AI Q&A
2025-11-21
EPSS Evaluated
2026-06-15
NVD
CVE-2025-62189
EUVD
EUVD-2025-198420
Affected Vendors & Products
Showing 3 associated CPEs
Vendor Product Version / Range
secuavail logstare_collector to 2.4.2 (exc)
linux linux_kernel *
microsoft windows *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-863 The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability in LogStare Collector involves incorrect authorization in the UserRegistration functionality. It allows a non-administrative user to create a new user account by sending a specially crafted HTTP request, bypassing normal access controls.

Impact Analysis

If exploited, this vulnerability could allow unauthorized users to create new accounts, potentially leading to unauthorized access or privilege escalation within the system. This could compromise system integrity and security.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-62189. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart