CVE-2025-11959

{
  "id": "CVE-2025-11959",
  "sourceIdentifier": "[email protected]",
  "published": "2025-11-11T15:15:35.550",
  "lastModified": "2026-10-18T21:10:00.120",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Files or Directories Accessible to External Parties, Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Premierturk Information Technologies Inc. Excavation Management Information System allows Footprinting, Functionality Misuse.\n\nThis issue affects Excavation Management Information System: before v.10.2025.01."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de Archivos o Directorios Accesibles a Terceros Externos y Exposición de Información Personal Privada a un Actor No Autorizado en el Sistema de Información de Gestión de Excavaciones de Premierturk Information Technologies Inc. permite Footprinting y mal uso de la funcionalidad. Este problema afecta al Sistema de Información de Gestión de Excavaciones: anterior a la v.10.2025.01."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Premierturk Information Technologies Inc.",
          "product": "Excavation Management Information System",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0",
              "lessThan": "v.10.2025.01",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
          "baseScore": 8.1,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 5.2
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2025-11-12T14:54:23.229380Z",
          "id": "CVE-2025-11959",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-359"
        },
        {
          "lang": "en",
          "value": "CWE-552"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0388",
      "source": "[email protected]"
    },
    {
      "url": "https://www.usom.gov.tr/bildirim/tr-25-0388",
      "source": "[email protected]"
    }
  ]
}