Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2025-68392

Incorrect authorization in Protectel

Description

ARKETEAM Protectel modules PROTECTELMAJ and BDF allow low privileged users to use some of the functionalities reserved for admin users by forging direct requests to a specific endpoint.  This issue has been fixed in: PROTECTELMAJ v6.5.19 and BDF v6.4.67

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ARKETEAM PROTECTELMAJ

Default version status: unaffected

  • 0 to < 6.5.19affected

ARKETEAM BDF

Default version status: unaffected

  • 0 to < 6.4.67affected

References