CVE-2025-9982

Katalog CVE

CVSS 7.5 · High EPSS 0,27%

Kerentanan Plaintext Storage of a Password pada opensolution quick.cms. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

A vulnerability exists in QuickCMS version 6.8 where sensitive admin credentials are hardcoded in a configuration file and stored in plaintext. This flaw allows attackers with access to the source code or the server file system to retrieve authentication details, potentially leading to privilege escalation. The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version 6.8 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable.

Rincian

Terbit di NVD

14 November 2025

Terakhir diubah

7 Oktober 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-256: Plaintext Storage of a Password

EPSS (30 hari)

0,27% peluang dieksploitasi; lebih tinggi dari 17,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://cert.pl/posts/2025/11/CVE-2025-9982 advisory pihak ketiga
• https://opensolution.org/cms-system-quick-cms.html product