medium4.3
CVE-2025-42974
Due to missing authorization check, an attacker authenticated as a non-administrative user could call a remote-enabled function module.
Impact
Due to missing authorization check, an attacker authenticated as a non-administrative user could call a remote-enabled function module. This could enable access to information normally restricted, resulting in low impact on confidentiality. There is no impact on integrity or availability.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.