CVE-2025-69752

Summary

An issue in the "My Details" user profile functionality of Ideagen Q-Pulse 7.1.0.32 allows an authenticated user to view other users' profile information by modifying the objectKey HTTP parameter in the My Details page URL.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

Additional References

• https://github.com/brtsec/public-advisories/tree/main/advisories/CVE-2025-69752

References

• https://github.com/brtsec/public-advisories/tree/main/advisories/CVE-2025-69752

• ←Previous
• Next→