CVE-2025-46742CWE-521

Improper Access Control

Medium · published May 12, 2025

CVSS v3.1
4.3
EPSS
0%
Percentile
14.6
In the wild
Unconfirmed
What it is

Users who were required to change their password could still access system information before changing their password

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00243 · 14.6th percentile
Weakness
CWE-521 · Weak Password Requirements
Published
2025-05-12T16:10Z
EPSS history
Timeline
  • 12 MAY 16:10Z
    Improper Access Control
    cvelistv5