CVE-2025-15070CWE-200CWE-862broken-access-controlinformation-disclosure

CVE-2025-15070

Medium · published December 29, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
23.7
In the wild
Unconfirmed
What it is

Exposure of Sensitive Information to an Unauthorized Actor, Missing Authorization vulnerability in Gmission Web Fax allows Authentication Abuse.

This issue affects Web Fax: from 3.0 before 3.0.1

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00320 · 23.7th percentile
Weaknesses
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor; CWE-862 · Missing Authorization
Published
2025-12-29T11:15Z
Affected products (1)
ProductVersionsFixed in
gmission/web_fax≥ 3.0, < 4.04.0
References (1)
https://www.gmission.co.kr/fax1 · 09832df1-09c1-45b4-8a85-16c601d30feb
EPSS history
Timeline
  • 29 DEC 05:06Z
    Data Exposure in Gmission Web FAX
    cvelistv5