CVE-2025-7679CWE-306

Session ID Basic Auth Bypass

Critical · published August 11, 2025

CVSS v4.0

9.2

EPSS

0%

Percentile

38.5

In the wild

Unconfirmed

What it is

The ASPECT system allows users to bypass authentication.

This issue affects all versions of ASPECT

The record

Technical detail

CVSS v4.0: 9.2 · CRITICAL
Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS: 0.00459 · 38.5th percentile
Weakness: CWE-306 · Missing Authentication for Critical Function
Published: 2025-08-11T18:36Z

EPSS history

Timeline

11 AUG 18:36Z
Session ID Basic Auth Bypass
cvelistv5