CVE-2025-7358
Hard-coded Credentials in SoliClub Enables Authentication Abuse
Publication date: 2025-12-18
Last updated on: 2025-12-18
Assigner: Computer Emergency Response Team of the Republic of Turkey
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| utarit_informatics_services_inc | soliclub | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-798 | The product contains hard-coded credentials, such as a password or cryptographic key. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a Use of Hard-coded Credentials issue in Utarit Informatics Services Inc. SoliClub software versions before 5.3.7. It allows attackers to abuse authentication mechanisms by exploiting credentials that are embedded directly in the software code.
How can this vulnerability impact me? :
The vulnerability can lead to authentication abuse, allowing unauthorized users to gain access to the system without proper credentials. This can compromise the confidentiality of sensitive information, as indicated by the high impact on confidentiality in the CVSS score.