PT-2025-36055 · Unknown · Voicemailnotificationsettingsutil.Java

CVE-2025-48529

·

Publicado

2025-09-01

·

Atualizado

2025-09-05

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions VoicemailNotificationSettingsUtil.java (affected versions not specified)
Description A cross-user data leak exists due to a confused deputy condition within the setRingtoneUri function of the VoicemailNotificationSettingsUtil.java file. This issue could result in local information disclosure without requiring additional execution privileges or user interaction.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-441

Identificadores relacionados

ASB-A-325030433
BDU:2025-11687
CVE-2025-48529

Produtos afetados

Voicemailnotificationsettingsutil.Java