← Database

CVE-2025-40670

HIGH CVSS: 8.8 Published: 2025-06-09 Modified: 2026-06-17

Description

Incorrect authorization vulnerability in TCMAN's GIM v11. This vulnerability allows an unprivileged attacker to create a user and assign it many privileges by sending a POST request to /PC/frmGestionUser.aspx/updateUser.

Affected Platforms

Tcman Gim

Weakness Type

CWE-863

References