VULNERABILITY INTELLIGENCE
CVE-2025-34156
EPSS probability0.37%
CISA KEVNot currently listed
Published2025-10-23
Last modified2026-10-23
Description
Tibbo AggreGate Network Manager < 6.40.05 exposes sensitive system information through an unauthenticated endpoint at /cwmp/happyaxis.jsp. The page discloses Java system properties, server path details, and version information to unauthorized users, resulting in information disclosure that could aid further compromise.
Weakness classification
- disclosure@vulncheck.com: CWE-497