← Back

CVE-2025-62644

nvd nist
Published: Oct 17, 2025Modified: Oct 31, 2025

JSON object

Loading...
7.7
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Exploitability: 3.1 / Impact: 4.0
Source: NVD

Description

The Restaurant Brands International (RBI) assistant platform through 2025-09-06 has a Global Store Directory that shares personal information among authenticated users.

Affected (1)

Rbi
1 product
Restaurant Brands International Assistant
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Restaurant Brands International Assistant
Up to 2025-09-06

Related CWEs

CWE-359
Exposure of Private Personal Information to an Unauthorized Actor
The product does not properly prevent a person's private, personal information from being accessed by actors who either (1) are not explicitly authorized to access the information or (2) do not have the implicit consent of the person about whom the information is collected.

References (5)

Source: cve@mitre.org
ExploitThird Party Advisory
Source: cve@mitre.org
Permissions Required
Source: cve@mitre.org
Not Applicable
Source: cve@mitre.org
Press/Media CoverageThird Party Advisory
Source: cve@mitre.org
Press/Media CoverageThird Party Advisory

Timeline

No history available yet.