CVE-2025-25595

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-25595
A lack of rate limiting in the login page of Safe App version a3.0.9 allows attackers to bypass authentication via a brute force attack.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://pastebin.com/t8FthPaF Third Party Advisory
https://play.google.com/store/apps/details?id=com.iitb.cse.arkenstone.safe_v2 Product
https://pastebin.com/t8FthPaF Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:iitb:safe:a3.0.9:*:*:*:*:android:*:*
History

01 Apr 2025, 20:38

Type Values Removed Values Added
CPE cpe:2.3:a:iitb:safe:a3.0.9:*:*:*:*:android:*:*
First Time Iitb safe
Iitb
References () https://pastebin.com/t8FthPaF - () https://pastebin.com/t8FthPaF - Third Party Advisory
References () https://play.google.com/store/apps/details?id=com.iitb.cse.arkenstone.safe_v2 - () https://play.google.com/store/apps/details?id=com.iitb.cse.arkenstone.safe_v2 - Product

25 Mar 2025, 17:16

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.8
Summary
  • (es) La falta de limitación de velocidad en la página de inicio de sesión de la versión a3.0.9 de Safe App permite a los atacantes eludir la autenticación mediante un ataque de fuerza bruta.
CWE CWE-307
References () https://pastebin.com/t8FthPaF - () https://pastebin.com/t8FthPaF -

18 Mar 2025, 17:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-03-18 17:15

Updated : 2025-04-01 20:38

NVD link : CVE-2025-25595

Mitre link : CVE-2025-25595

CVE.ORG link : CVE-2025-25595

JSON object : View

Products Affected

iitb

  • safe
CWE
CWE-307

Improper Restriction of Excessive Authentication Attempts