BaseFortify

Publication date: 2026-01-22

Last updated on: 2026-01-26

Assigner: ICS-CERT

Description

An attacker with access to the project file could use the exposed credentials to impersonate users, escalate privileges, or gain unauthorized access to systems and services. The absence of robust encryption or secure handling mechanisms increases the likelihood of this type of exploitation, leaving sensitive information more vulnerable.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-22

Last Modified

2026-01-26

Generated

2026-07-06

AI Q&A

2026-01-23

EPSS Evaluated

2026-07-05

NVD

CVE-2025-67652

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-261	Obscuring a password with a trivial encoding does not protect the password.

Attack-Flow Graph

Executive Summary

This vulnerability involves exposed credentials within a project file that an attacker with access to the file can exploit. The attacker could impersonate users, escalate privileges, or gain unauthorized access to systems and services. The lack of strong encryption or secure handling increases the risk of such exploitation, making sensitive information vulnerable.

Impact Analysis

The vulnerability can lead to unauthorized access to systems and services, user impersonation, and privilege escalation. This could compromise sensitive information and system integrity, potentially causing operational disruptions or data breaches.

Hi! I’m here to help you understand CVE-2025-67652. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70