CVE-2025-63822: SirenGPS Android Application vulnerability
SirenGPS Android Application 2.19.44 is vulnerable to Incorrect Access Control. An authenticated attacker can manipulate user identifier parameters to bypass authorization controls and gain unauthorized READ and WRITE access to other users' personal information. The API fails to validate that the requesting user is authorized to access the target user's data.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-63822?
CVE-2025-63822 has a risk score of 65, indicating a moderate severity level.
How do I fix CVE-2025-63822?
To fix CVE-2025-63822, ensure proper validation of user identification parameters in the API to prevent unauthorized access.
Who is affected by CVE-2025-63822?
CVE-2025-63822 affects users of the SirenGPS Android Application version 2.19.44.
What type of vulnerability is CVE-2025-63822?
CVE-2025-63822 is classified as an Incorrect Access Control vulnerability.
Can CVE-2025-63822 lead to data breaches?
Yes, CVE-2025-63822 can allow authenticated attackers to gain unauthorized READ and WRITE access to personal information, potentially leading to data breaches.