CNNVD-202512-235 Information

CNNVD ID

CNNVD-202512-235

CVE-2025-41014

  • CNNVD Published: 2025-12-02

Description (Chinese)

TCMAN GIM是西班牙TCMAN公司的一款管理系统。 TCMAN GIM v11 20250304版本存在信息泄露漏洞,该漏洞源于未经验证的攻击者可通过pda:username参数确定用户是否存在。

Description (English)

TCMAN GIM is a management system for TCMAN in Spain. The TCMAN GIM v11 20250304 version contains a leak loophole, which originates from uncertified assailants who can determine the existence of the user by pda:username parameters.

Hazard Level

High

Vulnerability Type

信息泄露

Affected Vendor

TCMAN

Published

2025-12-02

Last Modified

2026-02-24

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-tcman-gim-2

Patch

https://tcman.com/

Share on: