Incorrect access control in Sage DPW 2024_12_004 and earlier allows unauthorized attackers to access the built-in Database Monitor via a crafted request. The vendor has stated that the issue is fixed in 2025_06_000, released in June 2025.
CVSS
No CVSS.
References
Configurations
No configuration.
History
11 Aug 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | Incorrect access control in Sage DPW 2024_12_004 and earlier allows unauthorized attackers to access the built-in Database Monitor via a crafted request. The vendor has stated that the issue is fixed in 2025_06_000, released in June 2025. |
06 Aug 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-08-06 16:15
Updated : 2025-08-11 16:15
NVD link : CVE-2025-51532
Mitre link : CVE-2025-51532
JSON object : View
Products Affected
No product.
CWE
No CWE.