← Database

CVE-2025-1887

N/A CVSS: N/A Published: 2025-03-07 Modified: 2026-06-17

Description

SMB forced authentication vulnerability in versions prior to 2025.35.000 of Sage 200 Spain. This vulnerability allows an authenticated attacker with administrator privileges to obtain NTLMv2-SSP Hash by changing any of the paths to a UNC path pointing to a server controlled by the attacker.

Affected Platforms

Unknown

Weakness Type

CWE-294

References