Логотип exploitDog
bind:CVE-2025-43720
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-43720

Количество 2

Количество 2

nvd логотип

CVE-2025-43720

7 месяцев назад

Headwind MDM before 5.33.1 makes configuration details accessible to unauthorized users. The Configuration profile is exposed to the Observer user role, revealing the password requires to escape out of the MDM controlled device's profile.

CVSS3: 6.5
EPSS: Низкий
github логотип

GHSA-238c-73w3-x9m4

7 месяцев назад

Headwind MDM before 5.33.1 makes configuration details accessible to unauthorized users. The Configuration profile is exposed to the Observer user role, revealing the password requires to escape out of the MDM controlled device's profile.

CVSS3: 6.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2025-43720

Headwind MDM before 5.33.1 makes configuration details accessible to unauthorized users. The Configuration profile is exposed to the Observer user role, revealing the password requires to escape out of the MDM controlled device's profile.

CVSS3: 6.5
0%
Низкий
7 месяцев назад
github логотип
GHSA-238c-73w3-x9m4

Headwind MDM before 5.33.1 makes configuration details accessible to unauthorized users. The Configuration profile is exposed to the Observer user role, revealing the password requires to escape out of the MDM controlled device's profile.

CVSS3: 6.5
0%
Низкий
7 месяцев назад

Уязвимостей на страницу