CVE-2025-22729
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Jan 15, 2025
CWE ID 862
Summary
CVE-2025-22729 is a critical vulnerability affecting Infomaniak's VOD (Video On Demand) platform. The issue stems from missing authorization checks, enabling unauthorized access. Malicious actors can exploit incorrectly configured security levels and gain privileged access to VOD content. This vulnerability impacts Infomaniak VOD versions from n/a through 1.5.9. Immediate action is required to mitigate the risk of unauthorized access and potential data breaches.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.