CVE-2025-30048

Summary

The "serverConfig" endpoint, which returns the module configuration including credentials, is accessible without authentication.

Affected Software

Weaknesses

• CWE-306: CWE-306 Missing Authentication for Critical Function

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://cert.pl/en/posts/2025/08/CVE-2025-2313/

• ←Previous
• Next→