CVE-2025-34156
Tibbo AggreGate Network Manager < 6.40.05 exposes sensitive system information through an unauthenticated endpoint at /cwmp/happyaxis.jsp. The page discloses Java system properties, server path details, and version information to unauthorized users, resulting in information disclosure that could aid further compromise.
Vendor
-
Product
-
CWE
Yayın Tarihi
2025-10-23 17:15:36
Güncelleme
2025-10-27 13:20:15
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-