CVE-2025-63691

{
  "id": "CVE-2025-63691",
  "sourceIdentifier": "[email protected]",
  "published": "2025-11-07T16:15:42.820",
  "lastModified": "2026-11-05T14:10:00.273",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In pig-mesh In Pig version 3.8.2 and below, within the Token Management function under the System Management module, the token query interface (/api/admin/sys-token/page) has an improper permission verification issue, which leads to information leakage. This interface can be called by any user who has completed login authentication, and it returns the plaintext authentication Tokens of all users currently logged in to the system. As a result, ordinary users can obtain the administrator's authentication Token through this interface, thereby forging an administrator account, gaining the system's management permissions, and taking over the system."
    },
    {
      "lang": "es",
      "value": "En pig-mesh In Pig versión 3.8.2 y anteriores, dentro de la función de Gestión de Tokens bajo el módulo de Gestión del Sistema, la interfaz de consulta de tokens (/API/admin/sys-token/page) tiene un problema de verificación de permisos inadecuada, lo que lleva a una fuga de información. Esta interfaz puede ser llamada por cualquier usuario que haya completado la autenticación de inicio de sesión, y devuelve los Tokens de autenticación en texto plano de todos los usuarios actualmente conectados al sistema. Como resultado, los usuarios ordinarios pueden obtener el Token de autenticación del administrador a través de esta interfaz, forjando así una cuenta de administrador, obteniendo los permisos de gestión del sistema y tomando el control del sistema."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "version": "n/a",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
          "baseScore": 9.6,
          "baseSeverity": "CRITICAL",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "CHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 3.1,
        "impactScore": 5.8
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2025-11-07T18:45:01.831078Z",
          "id": "CVE-2025-63691",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-285"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:pig4cloud:pig:*:*:*:*:*:*:*:*",
              "versionEndIncluding": "3.8.2",
              "matchCriteriaId": "ED91B00C-6E96-4AD3-B814-D580C7F601B6"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/LockeTom/vulnerability/blob/main/md/pig_Information_disclosure_vulnerability.md",
      "source": "[email protected]",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ]
    },
    {
      "url": "https://github.com/pig-mesh/pig/issues/1202",
      "source": "[email protected]",
      "tags": [
        "Broken Link"
      ]
    }
  ]
}