CVE-2025-3709: Flowring Technology Agentflow - Account Lockout Bypass
Published May 2, 2025
·Updated
Agentflow from Flowring Technology has an Account Lockout Bypass vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to perform password brute force attack.
Affected Software
2 affected components
Flowring Technology Agentflow
Flowring Agentflow=4.0
Remediation
Information
Log in to the CRM and download the patch.
Event History
May 2, 2025
CVE Published
via MITRE·03:13 AM
Data Sourced
via MITRE·03:13 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·04:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-3709?
CVE-2025-3709 has a high severity rating due to the potential for unauthorized access and password brute force attacks.
2
How do I fix CVE-2025-3709?
To fix CVE-2025-3709, ensure that proper account lockout mechanisms are implemented and that password policies prevent brute force attacks.
3
Who is affected by CVE-2025-3709?
Users of Flowring Technology's Agentflow software are primarily affected by CVE-2025-3709.
4
Can CVE-2025-3709 be exploited remotely?
Yes, CVE-2025-3709 can be exploited remotely by unauthenticated attackers.
5
What type of vulnerability is CVE-2025-3709?
CVE-2025-3709 is an Account Lockout Bypass vulnerability.