Missing Authorization in Gmission Web Fax Allows Sensitive Data Exposure

Publication date: 2025-12-29

Last updated on: 2026-05-20

Assigner: FSI

Description

Exposure of Sensitive Information to an Unauthorized Actor, Missing Authorization vulnerability in Gmission Web Fax allows Authentication Abuse. This issue affects Web Fax: from 3.0 before 3.0.1

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-12-29

Last Modified

2026-05-20

Generated

2026-07-06

AI Q&A

2025-12-29

EPSS Evaluated

2026-07-05

NVD

CVE-2025-15070

Affected Vendors & Products

Vendor	Product	Version / Range
gmission	web_fax	3.0
gmission	web_fax	4.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

This vulnerability is a Missing Authorization issue in Gmission Web Fax versions from 3.0 before 4.0, which allows an unauthorized actor to abuse authentication and gain exposure to sensitive information.

Impact Analysis

The vulnerability can lead to exposure of sensitive information to unauthorized actors, potentially compromising confidentiality without affecting integrity or availability.

Hi! I’m here to help you understand CVE-2025-15070. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70