CVE-2025-4364 HIGH

CVE-2025-4364: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Vendor Assured Telematics Inc.
Product Fleet Management System
Weakness CWE-497
Published May 20, 2025
Last update May 20, 2025
View on NVD All CVEs

CVSS base score

8.7/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

The affected products could allow an unauthenticated attacker to access system information that could enable further access to sensitive files and obtain administrative credentials.

Key dates

02Disclosure timeline

May 20, 2025 CVE published
May 20, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-47378 Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS CVE-2026-24593 WordPress AWP Classifieds plugin <= 4.4.3 - Sensitive Data Exposure vulnerability CVE-2024-32732 Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence platform CVE-2026-39566 WordPress DirectoryPress plugin <= 3.6.26 - Sensitive Data Exposure vulnerability CVE-2026-24536 WordPress Webpushr plugin <= 4.38.0 - Sensitive Data Exposure vulnerability