ABC Fine Wine & Spirits Android App version v.11.27.5 and before (package name com.cta.abcfinewineandspirits), developed by ABC Liquors, Inc., contains an improper access control vulnerability in its login mechanism. The application does not properly validate user passwords during authentication, allowing attackers to bypass login checks and obtain valid session identifiers. Successful exploitation could result in unauthorized account access, privacy breaches, and misuse of the platform.
References
Configurations
No configuration.
History
30 Oct 2025, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| CWE | CWE-284 |
30 Oct 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-10-30 16:15
Updated : 2025-10-30 21:15
NVD link : CVE-2025-61115
Mitre link : CVE-2025-61115
CVE.ORG link : CVE-2025-61115
JSON object : View
Products Affected
No product.
CWE
CWE-284
Improper Access Control