← Database

CVE-2025-25585

HIGH CVSS: 7.3 Published: 2025-03-18 Modified: 2026-06-17

Description

Incorrect access control in the component /config/WebSecurityConfig.java of yimioa before v2024.07.04 allows unauthorized attackers to arbitrarily modify Administrator passwords.

Affected Platforms

R1Bbit Yimioa

Weakness Type

CWE-284

References