medium6.9
CVE-2025-34156
Tibbo AggreGate Network Manager < 6.40.05 exposes sensitive system information through an unauthenticated endpoint at /cwmp/happyaxis.jsp.
Impact
Tibbo AggreGate Network Manager < 6.40.05 exposes sensitive system information through an unauthenticated endpoint at /cwmp/happyaxis.jsp. The page discloses Java system properties, server path details, and version information to unauthorized users, resulting in information disclosure that could aid further compromise.
Affected products
| Product | Affected versions |
|---|---|
| Tibbo AggreGate Network Manager | before 6.40.05 |
Versions were read from the advisory text. No structured product data has been published for this record yet.