Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2025-40664

Missing authentication vulnerability in TCMAN GIM v11

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
INCIBE

Description

Missing authentication vulnerability in TCMAN GIM v11. This allows an unauthenticated attacker to access the resources /frmGestionUser.aspx/GetData, /frmGestionUser.aspx/updateUser and /frmGestionUser.aspx/DeleteUser.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TCMAN GIM

Default version status: unaffected

  • 11affected

References