CVE-2025-67789

—

CVSS 3.1

5.3 medium

EPSS

<1%p12

Published

Dec 17, 2025 (Dec 17, 2025)

Modified

Jun 17, 2026

Description

An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5. Authenticated users can retrieve the computer count of other DriveLock tenants via the DriveLock API.

Vendors: drivelock
Products: drivelock
Weakness: CWE-284
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.