CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.5. See the original NVD description below for full technical details.
CVE
CVE-2025-40669
Severity
MEDIUM
CVSS
6.5
EPSS
0.21%
Original NVD Description
Incorrect authorization vulnerability in TCMAN's GIM v11. This vulnerability allows an unprivileged attacker to modify the permissions held by each of the application's users, including the user himself by sending a POST request to /PC/Options.aspx?Command=2&Page=-1.
Related CVEs
Other vulnerabilities affecting the same vendor(s)