{"id":"CVE-2025-5192","state":"PUBLISHED","title":"Soar Cloud HRD Human Resource Management System - Missing Authentication for Critical Function","description":"A missing authentication for critical function vulnerability in the client application of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to bypass authentication and access application functions.","publishedAt":"2025-06-06T09:15:17.081Z","updatedAt":"2025-06-06T13:59:48.427Z","severity":{"score":9.3,"label":"Critical","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","source":"ZUSO ART"},"assigner":"ZUSO ART","products":["Soar Cloud System CO., LTD. HRD Human Resource Management System"],"affected":[{"vendor":"Soar Cloud System CO., LTD.","product":"HRD Human Resource Management System","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"7.3.2025.0408","versionType":"custom"}]}],"references":["https://zuso.ai/advisory/za-2025-04"],"weaknesses":["CWE-306"],"ingestedAt":"2026-10-29T20:09:39.787Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/5xxx/CVE-2025-5192.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-5192","state":"PUBLISHED","datePublished":"2025-06-06T09:15:17.081Z","dateUpdated":"2025-06-06T13:59:48.427Z","assignerShortName":"ZUSO ART","assignerOrgId":"256c161b-b921-402b-8c3b-c6c9c14d5d88","dateReserved":"2025-05-26T06:22:57.842Z"},"containers":{"cna":{"title":"Soar Cloud HRD Human Resource Management System - Missing Authentication for Critical Function","descriptions":[{"lang":"en","value":"A missing authentication for critical function vulnerability in the client application of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to bypass authentication and access application functions."}],"affected":[{"vendor":"Soar Cloud System CO., LTD.","product":"HRD Human Resource Management System","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"7.3.2025.0408","versionType":"custom"}]}],"references":[{"url":"https://zuso.ai/advisory/za-2025-04","tags":["third-party-advisory"]}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":9.3,"baseSeverity":"CRITICAL","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-306","description":"CWE-306 Missing Authentication for Critical Function","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"ZUSO ART","orgId":"256c161b-b921-402b-8c3b-c6c9c14d5d88","dateUpdated":"2025-06-06T09:15:17.081Z"},"datePublic":"2025-06-06T04:00:00.000Z","source":{"defect":["ZA-2025-04"],"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-06-06T13:59:33.836809Z","id":"CVE-2025-5192","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-06-06T13:59:48.427Z"}}]}}}