{"id":"CVE-2025-11145","state":"PUBLISHED","title":"User Enumeration in CBK Soft's enVision","description":"Observable Discrepancy, Exposure of Sensitive Information to an Unauthorized Actor, Exposure of Private Personal Information to an Unauthorized Actor vulnerability in CBK Soft Software Hardware Electronic Computer Systems Industry and Trade Inc. EnVision allows Account Footprinting.\n\nThis issue affects enVision: before 250566.","publishedAt":"2025-10-24T14:25:37.498Z","updatedAt":"2026-06-04T19:44:41.463Z","severity":{"score":7.5,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","source":"TR-CERT"},"assigner":"TR-CERT","products":["CBK Soft Software Hardware Electronic Computer Systems Industry and Trade Inc. enVision"],"affected":[{"vendor":"CBK Soft Software Hardware Electronic Computer Systems Industry and Trade Inc.","product":"enVision","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"250566","versionType":"custom"}]}],"references":["https://www.usom.gov.tr/bildirim/tr-25-0361","https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0361"],"weaknesses":["CWE-203","CWE-200","CWE-359"],"ingestedAt":"2026-10-29T20:08:31.050Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/11xxx/CVE-2025-11145.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-11145","state":"PUBLISHED","datePublished":"2025-10-24T14:25:37.498Z","dateUpdated":"2026-06-04T19:44:41.463Z","assignerShortName":"TR-CERT","assignerOrgId":"ca940d4e-fea4-4aa2-9a58-591a58b1ce21","dateReserved":"2025-09-29T08:22:55.571Z"},"containers":{"cna":{"title":"User Enumeration in CBK Soft's enVision","descriptions":[{"lang":"en","value":"Observable Discrepancy, Exposure of Sensitive Information to an Unauthorized Actor, Exposure of Private Personal Information to an Unauthorized Actor vulnerability in CBK Soft Software Hardware Electronic Computer Systems Industry and Trade Inc. EnVision allows Account Footprinting.\n\nThis issue affects enVision: before 250566."}],"affected":[{"vendor":"CBK Soft Software Hardware Electronic Computer Systems Industry and Trade Inc.","product":"enVision","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"250566","versionType":"custom"}]}],"references":[{"url":"https://www.usom.gov.tr/bildirim/tr-25-0361","tags":["government-resource","broken-link"]},{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0361","tags":["government-resource"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseSeverity":"HIGH","baseScore":7.5,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-203","lang":"en","description":"CWE-203 Observable Discrepancy","type":"CWE"}]},{"descriptions":[{"cweId":"CWE-200","lang":"en","description":"CWE-200 Exposure of Sensitive Information to an Unauthorized Actor","type":"CWE"}]},{"descriptions":[{"cweId":"CWE-359","lang":"en","description":"CWE-359 Exposure of Private Personal Information to an Unauthorized Actor","type":"CWE"}]}],"providerMetadata":{"shortName":"TR-CERT","orgId":"ca940d4e-fea4-4aa2-9a58-591a58b1ce21","dateUpdated":"2026-06-04T19:44:41.463Z"},"datePublic":"2025-10-24T14:21:00.000Z","impacts":[{"capecId":"CAPEC-575","descriptions":[{"lang":"en","value":"CAPEC-575 Account Footprinting"}]}],"credits":[{"lang":"en","value":"Emre AKTAŞ","type":"finder"}],"source":{"defect":["TR-25-0361"],"advisory":"TR-25-0361","discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-10-28T14:04:56.630174Z","id":"CVE-2025-11145","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-10-28T14:05:07.301Z"}}]}}}