Medium · 5.3 CVE-2025-67789 EUVD-2025-203953GHSA-xphx-6fx2-92w6

An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5. Authenticated users can retrieve the c…

Published Dec 17, 2025 · Updated Dec 17, 2025 · Assigned by mitre

Description

An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5. Authenticated users can retrieve the computer count of other DriveLock tenants via the DriveLock API.

Advisories 1

WID-SEC-2025-2879 DriveLock: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 18, 2025

References

https://drivelock.help/versions/current/web/en/releasenotes/Content/ReleaseNotes_DriveLock/SecurityBulletins/25-004-DESInfoDisclosure.htm

EUVD	v3.1	5.3
CISA-ADP	v3.1	5.3