← CVE Intelligence

CVE-2025-3091

MB connect line: Authorization bypass in mbCONNECT24/mymbCONNECT24 PUBLISHED

Description (CNA)

An low privileged remote attacker in possession of the second factor for another user can login as that user without knowledge of the other user`s password.

Affected (CNA)

Vendor / productVersions
MB connect line / mbCONNECT24affected 0 before 2.16.5
MB connect line / mymbCONNECT24affected 0 before 2.18.0
MB connect line / mymbCONNECT24affected 0 before 2.18.0
MB connect line / mymbCONNECT24affected 0 before 2.16.5
Helmholz / myREX24affected 0 before 2.18.0
Helmholz / myREX24affected 0 before 2.16.5
Helmholz / myREX24.virtualaffected 0 before 2.18.0
Helmholz / myREX24.virtualaffected 0 before 2.16.5

CWE

CWE-639

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.