CVE-2025-25055

CVSS 3.0 Score 5.3 of 10 (medium)

Details

Published Feb 18, 2025
CWE ID 290

Summary

CVE-2025-25055 is a vulnerability affecting FileMegane versions above 1.0.0.0 and below 3.4.0.0. This issue enables an authentication bypass through spoofing, making it possible for unauthorized users to impersonate others. Consequently, restricted file contents can be accessed, potentially leading to data breaches or unintended modifications. Attackers can leverage this vulnerability to gain unauthorized access to sensitive information, posing a significant risk to organizations using the affected FileMegane software. It is recommended that users upgrade to the latest version of FileMegane to mitigate this threat.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share