CVE-2025-4378

CRITICAL EPSS 19.9%

Published Jun 24, 20251y ago · Modified Jun 17, 20262w ago

10.0 CVSS 3.1

Critical

Published Jun 24, 2025 1y ago

Last Modified Jun 17, 2026 2w ago

Description

Cleartext Transmission of Sensitive Information, Use of Hard-coded Credentials vulnerability in Ataturk University ATA-AOF Mobile Application allows Authentication Abuse, Authentication Bypass. This issue affects ATA-AOF Mobile Application: before 20.06.2025.

CVSS Details

Base Score

10.0

Exploitability

3.9

Impact

6.0

Vector string

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L

Attack Vector Network

Attack Complexity Low

Privileges Required None

User Interaction None

Scope Changed

Confidentiality High

Integrity High

Availability Low

Threat Intelligence

EPSS Exploit Probability

19.9% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 2

CWE-319

CWE-798 Use of Hard-coded Credentials Authentication

References 2

siberguvenlik.gov.tr https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0135
usom.gov.tr https://www.usom.gov.tr/bildirim/tr-25-0135

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.