VULNERABILITY INTELLIGENCE
CVE-2025-67789
CVSS score5.3 MEDIUM
EPSS probability0.22%
CISA KEVNot currently listed
Published2025-12-17
Last modified2026-10-13
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Description
An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5. Authenticated users can retrieve the computer count of other DriveLock tenants via the DriveLock API.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-284
Primary references
- cve@mitre.org — Release Notes, Vendor Advisory