CVE-2025-31513

medium

Description

An issue was discovered in AlertEnterprise Guardian 4.1.14.2.2.1. One can elevate to administrator privileges via the IsAdminApprover parameter in a Request%20Building%20Access requestSubmit API call.

References

https://x.com/pand0rausa/status/1947477020809826359

https://alertenterprise.com/switch-to-guardian/

Details

Source: Mitre, NVD

Published: 2025-07-22

Updated: 2025-07-25

Risk Information

CVSS v2

Base Score: 6.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.5

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N