CVE-2025-40669CWE-863

Incorrect Authorization vulnerability in TCMAN GIM

High · published June 9, 2025

CVSS v4.0
7.1
EPSS
0%
Percentile
15.6
In the wild
Unconfirmed
What it is

Incorrect authorization vulnerability in TCMAN's GIM v11. This vulnerability allows an unprivileged attacker to modify the permissions held by each of the application's users, including the user himself by sending a POST request to /PC/Options.aspx?Command=2&Page=-1.

The record
Technical detail
CVSS v4.0
7.1 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS
0.00251 · 15.6th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2025-06-09T12:26Z
EPSS history
Timeline
  • 09 JUN 12:26Z
    Incorrect Authorization vulnerability in TCMAN GIM
    cvelistv5