> CVE-2025-3773

« BACK_TO_HOME
PUBLISHED
2025-06-26 12:15
MODIFIED
2025-06-26 18:57
EPSS (Prob. Exploit)
0.14%
Top 96.3%
DATA SOURCES:
NVD 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-11-08 GITHUB 🔗 2026-11-11

> DESCRIPTION

A sensitive information exposure vulnerability in System Information Reporter (SIR) 1.0.3 and prior allows an authenticated non-admin local user to extract sensitive information stored in a registry backup folder.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-m9gh-789g-q5pv MODERATE

Elasticsearch PKI Realm Authentication Bypass Vulnerability Allows User Impersonation Through Crafted Client Certificates

AFFECTED PACKAGES:
MAVEN / org.elasticsearch.plugin:x-pack-core
>= 9.2.0, < 9.2.2
Fixed in: 9.2.2
MAVEN / org.elasticsearch.plugin:x-pack-core
>= 9.0.0-beta1, < 9.1.8
Fixed in: 9.1.8
MAVEN / org.elasticsearch.plugin:x-pack-core
>= 7.0.0-alpha1, < 8.19.8
Fixed in: 8.19.8
MAVEN / org.elasticsearch.plugin:x-pack-security
>= 9.2.0, < 9.2.2
Fixed in: 9.2.2
MAVEN / org.elasticsearch.plugin:x-pack-security
>= 9.0.0-beta1, < 9.1.8
Fixed in: 9.1.8
MAVEN / org.elasticsearch.plugin:x-pack-security
>= 7.0.0-alpha1, < 8.19.8
Fixed in: 8.19.8

> HISTORIQUE DES MODIFICATIONS

Première apparition
26/06/2025 12:15
Source: NVD
📊 ENRICHISSEMENT 18/10/2025 15:05
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 1 Dernière mise à jour: 1 year ago
« BACK_TO_HOME