{"id":"CVE-2025-2306","state":"PUBLISHED","title":"Improper Access Control vulnerability in LIVE CONTRACT","description":"An Improper Access Control vulnerability was\nidentified in the file download functionality. This vulnerability allows users\nto download sensitive documents without authentication, if the URL is known.\n\n\n\nThe attack\nrequires the attacker to know the documents UUIDv4.","publishedAt":"2025-05-16T12:10:13.895Z","updatedAt":"2025-05-16T13:02:39.876Z","severity":{"score":5.9,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","source":"cirosec"},"assigner":"cirosec","products":["SYNCPILOT LIVE CONTRACT"],"affected":[{"vendor":"SYNCPILOT","product":"LIVE CONTRACT","defaultStatus":"unaffected","versions":[{"version":"3","status":"affected","lessThan":"5.4.12","versionType":"semver"},{"version":"5.5","status":"affected","lessThan":"5.5.4","versionType":"semver"},{"version":"5.6","status":"affected","lessThan":"5.6.3","versionType":"semver"}]}],"references":["https://www.cirosec.de/sa/sa-2025-004"],"weaknesses":["CWE-284"],"ingestedAt":"2026-10-29T20:08:55.257Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/2xxx/CVE-2025-2306.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-2306","state":"PUBLISHED","datePublished":"2025-05-16T12:10:13.895Z","dateUpdated":"2025-05-16T13:02:39.876Z","assignerShortName":"cirosec","assignerOrgId":"a341c0d1-ebf7-493f-a84e-38cf86618674","dateReserved":"2025-03-14T12:24:19.522Z"},"containers":{"cna":{"title":"Improper Access Control vulnerability in LIVE CONTRACT","descriptions":[{"lang":"en","value":"An Improper Access Control vulnerability was\nidentified in the file download functionality. This vulnerability allows users\nto download sensitive documents without authentication, if the URL is known.\n\n\n\nThe attack\nrequires the attacker to know the documents UUIDv4."}],"affected":[{"vendor":"SYNCPILOT","product":"LIVE CONTRACT","defaultStatus":"unaffected","versions":[{"version":"3","status":"affected","lessThan":"5.4.12","versionType":"semver"},{"version":"5.5","status":"affected","lessThan":"5.5.4","versionType":"semver"},{"version":"5.6","status":"affected","lessThan":"5.6.3","versionType":"semver"}]}],"references":[{"url":"https://www.cirosec.de/sa/sa-2025-004"}],"metrics":[{"cvssV3_1":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-284","description":"CWE-284 Improper Access Control","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"cirosec","orgId":"a341c0d1-ebf7-493f-a84e-38cf86618674","dateUpdated":"2025-05-16T12:10:13.895Z"},"credits":[{"lang":"en","type":"finder","value":"Felix Schmid <felix.schmid@cirosec.de>"}],"impacts":[{"capecId":"CAPEC-1","descriptions":[{"lang":"en","value":"CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs"}]}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"Update to versions&nbsp;5.4.12, 5.5.4, 5.6.3 or higher."}],"value":"Update to versions 5.4.12, 5.5.4, 5.6.3 or higher."}],"source":{"advisory":"SA-2025-004","discovery":"EXTERNAL"},"timeline":[{"lang":"en","time":"2025-03-04T23:00:00.000Z","value":"Vendor was contacted and informed about the vulnerability via email."},{"lang":"en","time":"2025-03-04T23:00:00.000Z","value":"Initial response received from vendor. Vendor acknowledged the vulnerability."},{"lang":"en","time":"2025-03-12T23:00:00.000Z","value":"Vendor informed us that the issue was resolved."}],"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-05-16T13:02:34.088925Z","id":"CVE-2025-2306","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-05-16T13:02:39.876Z"}}]}}}