CVE-2025-2311

Authentication Bypass in Sechard Information Technologies' SecHard

State: Published
Severity: 9.0 Critical
Published: Mar 20, 2025
Updated: Jun 6, 2026
Reserved: Mar 14, 2025

Description

Incorrect Use of Privileged APIs, Cleartext Transmission of Sensitive Information, Insufficiently Protected Credentials vulnerability in Sechard Information Technologies SecHard allows Authentication Bypass, Interface Manipulation, Authentication Abuse, Harvesting Information via API Event Monitoring.

This issue affects SecHard: before 3.3.0.20220411.

Scores

CVSS	Score	Vector	Source
3.1	9.0 Critical	CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H	TR-CERT

Weaknesses

CWE-648 Incorrect Use of Privileged APIs
CWE-319 Cleartext Transmission of Sensitive Information
CWE-522 Insufficiently Protected Credentials

Affected Products

Product	Versions
SecHardSechard Information Technologies	before 3.3.0.20220411Affected

References

https://www.usom.gov.tr/bildirim/tr-25-0074government-resourcebroken-link
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0074government-resource

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.