CVE-2025-40669 — Incorrect Authorization vulnerability in TCMAN GIM
Incorrect authorization vulnerability in TCMAN's GIM v11. This vulnerability allows an unprivileged attacker to modify the permissions held by each of the application's users, i…
Published: 2025-06-09 · CVSS: 7.1 · CVSS 4.0
Incorrect authorization vulnerability in TCMAN's GIM v11. This vulnerability allows an unprivileged attacker to modify the permissions held by each of the application's users, including the user himself by sending a POST request to /PC/Options.aspx?Command=2&Page=-1.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7