Skip to content
OpenAdvisories
Critical · 9.0 CVE-2025-2311 EUVD-2025-6806GHSA-cfc5-c899-6ww2

Authentication Bypass in Sechard Information Technologies' SecHard

Published Mar 20, 2025 · Updated Jun 6, 2026 · Assigned by TR-CERT

Description

Incorrect Use of Privileged APIs, Cleartext Transmission of Sensitive Information, Insufficiently Protected Credentials vulnerability in Sechard Information Technologies SecHard allows Authentication Bypass, Interface Manipulation, Authentication Abuse, Harvesting Information via API Event Monitoring.

This issue affects SecHard: before 3.3.0.20220411.

Affected products

VendorProductAffectedFixed
Sechard Information Technologies SecHard < 3.3.0.20220411 3.3.0.20220411

References