CVE-2025-2271

Summary

CVE-2025-2271 is a vulnerability affecting Issuetrak versions 17.2.2 and older. This issue involves an Insecure Direct Object Reference (IDOR) in the Issuetrak audit component, which allows a low-privileged user to gain unauthorized access to audit results of other users. The vulnerability exposes sensitive information, such as user details, network and hardware information, installed programs, running processes, drives, and printers. Due to insufficient access controls, an attacker can potentially gain unauthorized access to data, leading to privacy violations, data exposure, and increased security risks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.