CVE-2025-15398
MEDIUM
6,3
Source: [email protected]
Attack Vector: network
Attack Complexity: high
Privileges Required: none
User Interaction: none
Confidentiality: N/A
Integrity: N/A
Availability: N/A
LOW
3,7
Source: [email protected]
Attack Vector: network
Attack Complexity: high
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: low
Integrity: none
Availability: none
LOW
2,6
Source: [email protected]
Access Vector: network
Access Complexity: high
Authentication: none
Confidentiality: partial
Integrity: none
Availability: none
Description
AI Translation Available
A security vulnerability has been detected in Uasoft badaso up to 2.9.7. Affected is the function forgetPassword of the file src/Controllers/BadasoAuthController.php of the component Token Handler. Such manipulation leads to weak password recovery. The attack can be executed remotely. This attack is characterized by high complexity. The exploitability is told to be difficult. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
EPSS (Exploit Prediction Scoring System)
Trend Analysis
EPSS (Exploit Prediction Scoring System)
Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.
EPSS Score
0,0003
Percentile
0,1th
Updated
EPSS Score Trend (Last 75 Days)
640
Weak Password Recovery Mechanism for Forgotten Password
IncompleteCommon Consequences
Security Scopes Affected:
Access Control
Availability
Integrity
Other
Potential Impacts:
Gain Privileges Or Assume Identity
Dos: Resource Consumption (Other)
Other
Applicable Platforms
All platforms may be affected
Application
Badaso by Uatech
Version Range Affected
To
2.9.7
(inclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:uatech:badaso:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://note-hxlab.wetolink.com/share/HG1CWbb7FVnq
https://note-hxlab.wetolink.com/share/HG1CWbb7FVnq#-span--strong-step-1--trigge…
https://note-hxlab.wetolink.com/share/HG1CWbb7FVnq
https://note-hxlab.wetolink.com/share/HG1CWbb7FVnq#-span--strong-step-1--trigge…
https://vuldb.com/?ctiid.339207
https://vuldb.com/?id.339207
https://vuldb.com/?submit.720129