Description
Incorrect access control in the component /config/WebSecurityConfig.java of yimioa before v2024.07.04 allows unauthorized attackers to arbitrarily modify Administrator passwords.
High · 7.3
CVE-2025-25585
EUVD-2025-6768GHSA-82xf-2h8m-pmc5
Incorrect access control in the component /config/WebSecurityConfig.java of yimioa before v2024.07.04 allows unauthorized attackers to arbi…
Published Mar 18, 2025 · Updated Mar 19, 2025 · Assigned by mitre