CVE-2025-48461

{"id": "CVE-2025-48461", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.0, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 3.4, "exploitabilityScore": 1.6}]}, "published": "2025-06-24T03:15:33.613", "references": [{"url": "https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-061/", "source": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-341"}]}], "descriptions": [{"lang": "en", "value": "Successful exploitation of the vulnerability could allow an unauthenticated attacker to conduct brute force guessing and account takeover as the session cookies are predictable, potentially allowing the attackers to gain root, admin or user access and reset passwords."}, {"lang": "es", "value": "La explotaci\u00f3n exitosa de la vulnerabilidad podr\u00eda permitir a un atacante no autenticado realizar conjeturas por fuerza bruta y tomar el control de la cuenta, ya que las cookies de sesi\u00f3n son predecibles, lo que potencialmente permite a los atacantes obtener acceso de root, administrador o usuario y restablecer contrase\u00f1as."}], "lastModified": "2025-06-26T18:58:14.280", "sourceIdentifier": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4"}