CVE-2025-15023

Incorrect Authorization vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Automation System allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Library Automation System: from v.19.5 before v.22.1.

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0240

Configurations

No configuration.

History

30 Sep 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) Vulnerabilidad de autorización incorrecta en el Sistema de Automatización de Bibliotecas de Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta al Sistema de Automatización de Bibliotecas: desde la v.19.5 anterior a la v.22.1.

Information

Published : 2026-05-14 18:16

Updated : 2026-10-07 08:10

NVD link : CVE-2025-15023

Mitre link : CVE-2025-15023

CVE.ORG link : CVE-2025-15023

JSON object : View

Products Affected

No product.

CWE

CWE-863

Incorrect Authorization

{"id": "CVE-2025-15023", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-15023", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-05-14T18:36:08.369888Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "iletisim@usom.gov.tr", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "affected": [{"source": "iletisim@usom.gov.tr", "affectedData": [{"vendor": "Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc.", "product": "Library Automation System", "versions": [{"status": "affected", "version": "v.19.5", "lessThan": "v.22.1", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2026-05-14T18:16:34.527", "references": [{"url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0240", "source": "iletisim@usom.gov.tr"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "iletisim@usom.gov.tr", "description": [{"lang": "en", "value": "CWE-863"}]}], "descriptions": [{"lang": "en", "value": "Incorrect Authorization vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Automation System allows Exploiting Incorrectly Configured Access Control Security Levels.\n\nThis issue affects Library Automation System: from v.19.5 before v.22.1."}, {"lang": "es", "value": "Vulnerabilidad de autorizaci\u00f3n incorrecta en el Sistema de Automatizaci\u00f3n de Bibliotecas de Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. permite explotar niveles de seguridad de control de acceso configurados incorrectamente.\n\nEste problema afecta al Sistema de Automatizaci\u00f3n de Bibliotecas: desde la v.19.5 anterior a la v.22.1."}], "lastModified": "2026-10-07T08:10:00.200", "sourceIdentifier": "iletisim@usom.gov.tr"}