CVE-2025-25055 MEDIUM

CVE-2025-25055

Vendor Jip Infobridge Co., Ltd.
Product FileMegane
Weakness CWE-290
Published February 17, 2025
Last update February 18, 2025
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

Authentication bypass by spoofing issue exists in FileMegane versions above 1.0.0.0 prior to 3.4.0.0, which may lead to user impersonation. If exploited, restricted file contents may be accessed.

Key dates

02Disclosure timeline

February 17, 2025 CVE published
February 18, 2025 Record updated