CVE-2025-48463

{"id": "CVE-2025-48463", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.1, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 1.6}]}, "published": "2025-06-24T03:15:33.870", "references": [{"url": "https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-061", "source": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-312"}]}], "descriptions": [{"lang": "en", "value": "Successful exploitation of the vulnerability could allow an attacker to intercept data and conduct session hijacking on the exposed data as the vulnerable product uses unencrypted HTTP communication, potentially leading to unauthorised access or data tampering."}, {"lang": "es", "value": "La explotaci\u00f3n exitosa de la vulnerabilidad podr\u00eda permitir a un atacante interceptar datos y realizar un secuestro de sesi\u00f3n en los datos expuestos, ya que el producto vulnerable utiliza una comunicaci\u00f3n HTTP no cifrada, lo que potencialmente conduce a un acceso no autorizado o a la manipulaci\u00f3n de datos."}], "lastModified": "2025-06-26T18:58:14.280", "sourceIdentifier": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4"}