PT-2025-44640

CVE-2025-12552

Published

2025-10-31

Updated

2025-10-31

Description by

CVSS 3.1

9.8

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions BLU-IC2 versions through 1.19.5 BLU-IC4 versions through 1.19.5

Description The software exhibits an insufficient password policy. This allows for the use of weak or easily guessable passwords, potentially compromising account security.

Recommendations For BLU-IC2 versions through 1.19.5, implement a stronger password policy that enforces minimum length, complexity, and regular password changes. For BLU-IC4 versions through 1.19.5, implement a stronger password policy that enforces minimum length, complexity, and regular password changes.

Exploitability

Fix

Researchers

Vendors

Affected products

Weakness enumeration

CWE-521: Weak Password Requirements