CVE-2025-2311

critical · 9

Incorrect Use of Privileged APIs, Cleartext Transmission of Sensitive Information, Insufficiently Protected Credentials vulnerability in Sechard Information Technologies SecHard allows Authentication Bypass, Interface Manipulation, Authentication Abuse, Harvesting Information via API Event Monitoring. This issue affects SecHard: before 3.3.0.20220411.

CVSS

0.2%

EPSS (exploit prob.)

7th

EPSS percentile

2025-03-20

Published

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-319CWE-522CWE-648

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0074
https://www.usom.gov.tr/bildirim/tr-25-0074

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-2311