← CVE Intelligence

CVE-2025-42605

Improper Access Control Vulnerability in Meon Bidding Solutions PUBLISHED

Description (CNA)

This vulnerability exists in Meon Bidding Solutions due to improper authorization controls on certain API endpoints for the initiation, modification, or cancellation operations. An authenticated remote attacker could exploit this vulnerability by manipulating parameter in the API request body to gain unauthorized access to other user accounts. Successful exploitation of this vulnerability could allow remote attacker to perform authorized manipulation of data associated with other user accounts.

Affected (CNA)

Vendor / productVersions
Meon / Bidding Solutionsaffected 1.2

CWE

CWE-639

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.