What is GHSA-cfc5-c899-6ww2?

GHSA-cfc5-c899-6ww2 is a security advisory published by GitHub Security Advisories with Critical severity. Incorrect Use of Privileged APIs, Cleartext Transmission of Sensitive Information, Insufficiently...

Which CVE IDs does GHSA-cfc5-c899-6ww2 cover?

GHSA-cfc5-c899-6ww2 covers the following CVE IDs: CVE-2025-2311. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-cfc5-c899-6ww2?

GHSA-cfc5-c899-6ww2 has a CVSS v3 base score of 9.0, published by GitHub Security Advisories.

GHSA-cfc5-c899-6ww2CriticalCVSS 9.0

Incorrect Use of Privileged APIs, Cleartext Transmission of Sensitive Information, Insufficiently...

Vendor

GitHub Security Advisories

Published

March 20, 2025

Last Modified

June 6, 2026

🔗 CVE IDs covered (1)

CVE-2025-2311 →

📋 Description

Incorrect Use of Privileged APIs, Cleartext Transmission of Sensitive Information, Insufficiently Protected Credentials vulnerability in Nebula Informatics SecHard allows Authentication Bypass, Interface Manipulation, Authentication Abuse, Harvesting Information via API Event Monitoring.This issue affects SecHard: before 3.3.0.20220411.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2025-2311
https://www.usom.gov.tr/bildirim/tr-25-0074
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0074
https://github.com/advisories/GHSA-cfc5-c899-6ww2