critical9.8
CVE-2025-12871
The a+HRD developed by aEnrich has an Authentication Abuse vulnerability, allowing unauthenticated remote attackers to craft administrator access tokens and us…
Impact
The a+HRD developed by aEnrich has an Authentication Abuse vulnerability, allowing unauthenticated remote attackers to craft administrator access tokens and use them to access the system with elevated privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aenrich | A\+Hrd | through 7.5 |