6.5
CVE-2025-47222
- EPSS 0.06%
- Veröffentlicht 13.11.2025 21:15:49
- Zuletzt bearbeitet 17.12.2025 20:15:55
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginA class name enumeration was found in Keyfactor SignServer versions prior to 7.3.2. Setting any chosen class name to any of the properties requiring a class path and the provided class is not expected to return different errors if the class exists in deployment or not. This returns information about the classes loaded in the application or not to the clientside.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Keyfactor ≫ Signserver Version < 7.3.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.06% | 0.177 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 6.5 | 3.9 | 2.5 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
|
CWE-284 Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.