Executive Summary

Informations
Name CVE-2025-23012 First vendor Publication 2025-01-23
Vendor Cve Last vendor Modification 2025-02-03

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base Score N/A Attack Range N/A
Cvss Impact Score N/A Attack Complexity N/A
Cvss Expoit Score N/A Authentication N/A
Calculate full CVSS 2.0 Vectors scores

Detail

Fedora Repository 3.8.x includes a service account (fedoraIntCallUser) with default credentials and privileges to read read local files by manipulating datastreams. Fedora Repository 3.8.1 was released on 2015-06-11 and is no longer maintained. Migrate to a currently supported version (6.5.1 as of 2025-01-23).

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-23012

Sources (Detail)

https://github.com/fcrepo-exts/migration-utils
https://github.com/fcrepo/fcrepo/releases
https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/20...
https://wiki.lyrasis.org/display/FEDORA38/XACML+Policy+Enforcement#XACMLPolic...
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
Date Informations
2025-02-04 00:20:39
  • Multiple Updates
2025-01-24 00:20:27
  • First insertion