← Back

CVE-2025-63747

nvd nist
Published: Nov 17, 2025Modified: Jul 5, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

QaTraq 6.9.2 ships with administrative account credentials which are enabled in default installations and permit immediate login via the web application login page. Because the account provides administrative privileges in the default configuration, an attacker who can reach the login page can gain administrative access.

Affected (1)

Testmanagement
1 product
Qatraq
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Qatraq
Version 6.9.2

Related CWEs

CWE-521
Weak Password Requirements
The product does not require that users should have strong passwords, which makes it easier for attackers to compromise user accounts.

References (1)

Source: cve@mitre.org
ExploitThird Party Advisory

Timeline

No history available yet.