CVE-2025-2311 CRITICAL

CVE-2025-2311: Authentication Bypass in Sechard Information Technologies' SecHard

Vendor Sechard Information Technologies
Product SecHard
Weakness CWE-648
Published March 20, 2025
Last update June 6, 2026
View on NVD All CVEs

CVSS base score

9.0/10
Attack vector Adjacent
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

Incorrect Use of Privileged APIs, Cleartext Transmission of Sensitive Information, Insufficiently Protected Credentials vulnerability in Sechard Information Technologies SecHard allows Authentication Bypass, Interface Manipulation, Authentication Abuse, Harvesting Information via API Event Monitoring. This issue affects SecHard: before 3.3.0.20220411.

Key dates

02Disclosure timeline

March 20, 2025 CVE published
June 6, 2026 Record updated