CVE-2025-2201 MEDIUM

CVE-2025-2201: Broken access control vulnerability in the Innovación y Cualificación IcProgreso plugin

Vendor Innovación Y Cualificación
Product IcProgreso plugin
Weakness CWE-863 · Incorrect authorization
Published March 17, 2025
Last update March 17, 2025
View on NVD All CVEs

CVSS base score

6.9/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Broken access control vulnerability in the IcProgress Innovación y Cualificación plugin. This vulnerability allows an attacker to obtain sensitive information about other users such as public IP addresses, messages with other users and more.

Key dates

02Disclosure timeline

March 17, 2025 CVE published
March 17, 2025 Record updated