CVE-2025-61115

ABC Fine Wine & Spirits Android App version v.11.27.5 and before (package name com.cta.abcfinewineandspirits), developed by ABC Liquors, Inc., contains an…

High · published October 30, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
29.1
In the wild
Unconfirmed
What it is

⚡ Picture this: an entire login system that forgets to lock the front door! The ABC Fine Wine & Spirits Android app lets attackers slip right past password checks with ease! 🍷 It's like a bar that serves drinks without checking IDs – anyone can just walk in and take whatever they want. In this case, attackers can bypass login checks and access personal accounts, leading to serious breaches of privacy. The ramifications of this vulnerability are quite alarming. An attacker could gain unauthorized access to user accounts, potentially siphoning personal information or misusing the platform for malicious purposes. This could lead to devastating privacy breaches for countless users!

Put simply

It's like a bar that serves drinks without checking IDs – anyone can just walk in and take whatever they want. In this case, attackers can bypass login checks and access personal accounts, leading to serious breaches of privacy. The flaw in the ABC Fine Wine & Spirits app allows improper access control during user authentication, meaning it doesn't sufficiently validate user passwords, enabling bypass of login checks to obtain valid session identifiers.

What to do

The ramifications of this vulnerability are quite alarming. An attacker could gain unauthorized access to user accounts, potentially siphoning personal information or misusing the platform for malicious purposes. This could lead to devastating privacy breaches for countless users! To fortify the defenses, update the app to version 11.27.6 or later to rectify this flaw. Additionally, implement robust authentication measures to ensure that passwords are properly validated going forward. You've got this! By following these steps, you'll be one step closer to protecting user data and keeping the app secure! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00365 · 29.1th percentile
Published
2025-10-30T00:00Z
EPSS history
Timeline
  • 30 OCT 00:00Z
    ABC Fine Wine & Spirits Android App version v.11.27.5 and before (package name com.cta.abcfinewineandspirits), developed by ABC Liquors, Inc., contains an…
    cvelistv5