CVE-2025-37160 — Authenticated Broken Access Control (BAC) in REST API Configuration Service
A broken access control (BAC) vulnerability in the web-based management interface could allow an authenticated remote attacker with low privileges to view sensitive information.…
Published: 2025-11-18 · CVSS: 5.3 · CVSS 3.1
A broken access control (BAC) vulnerability in the web-based management interface could allow an authenticated remote attacker with low privileges to view sensitive information. Successful exploitation of this vulnerability could enable the attacker to disclose sensitive data.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7