CVE-2025-23179

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Apr 29, 2025
Updated: May 2, 2025
CWE ID 798

Summary

CVE-2025-23179 is a newly identified cybersecurity vulnerability carrying a CWE designation of CWE-798. This vulnerability stems from the use of hard-coded credentials within a system or application, posing a significant risk if the credentials fall into the wrong hands. Cybercriminals can exploit this weakness to gain unauthorized access, potentially leading to data breaches or system takeovers. The severity of the issue is heightened when the hard-coded credentials provide high-level privileges, enabling attackers to perform various malicious activities. To mitigate this risk, it is essential to update the affected software or application with the latest security patches, and to adopt secure credential management practices to protect sensitive information.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share