CVE-2025-42603: Information Disclosure Vulnerability in Meon KYC solutions
First published: Wed Apr 23 2025(Updated: )
This vulnerability exists in the Meon KYC solutions due to transmission of sensitive data in plain text within the response payloads of certain API endpoints. An authenticated remote attacker could exploit this vulnerability by intercepting API response that contains unencrypted sensitive information belonging to other users. Successful exploitation of this vulnerability could allow remote attacker to impersonate the target user and gain unauthorized access to the user account.
Credit: vdisclose@cert-in.org.in
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Meon KYC solutions |
Remedy
Upgrade KYC Solutions to version 1.2
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2025-42603?
CVE-2025-42603 is considered a moderate severity vulnerability due to the exposure of sensitive data.
How do I fix CVE-2025-42603?
To fix CVE-2025-42603, implement encryption for sensitive data in API response payloads.
What type of data is affected by CVE-2025-42603?
CVE-2025-42603 affects sensitive data transmitted in plain text within API responses.
Who can exploit CVE-2025-42603?
An authenticated remote attacker could exploit CVE-2025-42603 by intercepting unencrypted API responses.
In which software is CVE-2025-42603 found?
CVE-2025-42603 is found in Meon KYC solutions.
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/weakness
- agent/title
- agent/remedy
- agent/type
- agent/first-publish-date
- agent/description
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/severity
- agent/author
- agent/event
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- collector/epss-latest
- source/FIRST
- agent/source
- agent/tags
- agent/epss
- vendor/meon
- canonical/meon kyc solutions