CVE-2025-10161

Improper Restriction of Excessive Authentication Attempts, Client-Side Enforcement of Server-Side Security, Reliance on Untrusted Inputs in a Security Decision vulnerability in Turkguven Software Technologies Inc. Perfektive allows Brute Force, Authentication Bypass, Functionality Bypass. This issue affects Perfektive: before Version: 12574 Build: 2701.

CVSS v3 7.3 HIGH

7.3^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0387
https://www.usom.gov.tr/bildirim/tr-25-0387

Configurations

No configuration.

History

18 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) Restricción inadecuada de intentos excesivos de autenticación, Aplicación del lado del cliente de la seguridad del lado del servidor, Dependencia de entradas no confiables en una decisión de seguridad vulnerabilidad en Turkguven Software Technologies Inc. Perfektive permite Fuerza Bruta, omisión de autenticación, Omisión de Funcionalidad. Este problema afecta a Perfektive: antes de la Versión: 12574 Compilación: 2701.

Information

Published : 2025-11-11 13:15

Updated : 2026-10-18 21:10

NVD link : CVE-2025-10161

Mitre link : CVE-2025-10161

CVE.ORG link : CVE-2025-10161

JSON object : View

Products Affected

No product.

CWE

CWE-307

Improper Restriction of Excessive Authentication Attempts

CWE-602

Client-Side Enforcement of Server-Side Security

CWE-807

Reliance on Untrusted Inputs in a Security Decision

{"id": "CVE-2025-10161", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-10161", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-11-14T18:22:51.139313Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "iletisim@usom.gov.tr", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.3, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 3.4, "exploitabilityScore": 3.9}]}, "affected": [{"source": "iletisim@usom.gov.tr", "affectedData": [{"vendor": "Turkguven Software Technologies Inc.", "product": "Perfektive", "versions": [{"status": "affected", "version": "0", "lessThan": "Version: 12574 Build: 2701", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2025-11-11T13:15:43.593", "references": [{"url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0387", "source": "iletisim@usom.gov.tr"}, {"url": "https://www.usom.gov.tr/bildirim/tr-25-0387", "source": "iletisim@usom.gov.tr"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "iletisim@usom.gov.tr", "description": [{"lang": "en", "value": "CWE-307"}, {"lang": "en", "value": "CWE-602"}, {"lang": "en", "value": "CWE-807"}]}], "descriptions": [{"lang": "en", "value": "Improper Restriction of Excessive Authentication Attempts, Client-Side Enforcement of Server-Side Security, Reliance on Untrusted Inputs in a Security Decision vulnerability in Turkguven Software Technologies Inc. Perfektive allows Brute Force, Authentication Bypass, Functionality Bypass.\n\nThis issue affects Perfektive: before Version: 12574 Build: 2701."}, {"lang": "es", "value": "Restricci\u00f3n inadecuada de intentos excesivos de autenticaci\u00f3n, Aplicaci\u00f3n del lado del cliente de la seguridad del lado del servidor, Dependencia de entradas no confiables en una decisi\u00f3n de seguridad vulnerabilidad en Turkguven Software Technologies Inc. Perfektive permite Fuerza Bruta, omisi\u00f3n de autenticaci\u00f3n, Omisi\u00f3n de Funcionalidad. Este problema afecta a Perfektive: antes de la Versi\u00f3n: 12574 Compilaci\u00f3n: 2701."}], "lastModified": "2026-10-18T21:10:00.120", "sourceIdentifier": "iletisim@usom.gov.tr"}