CVE-2025-64065

{
  "id": "CVE-2025-64065",
  "sourceIdentifier": "[email protected]",
  "published": "2025-11-25T19:15:50.643",
  "lastModified": "2026-11-04T23:10:00.223",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Primakon Pi Portal 1.0.18 API /api/V2/pp_udfv_admin endpoint, fails to perform necessary server-side validation. The administrative LoginAs or user impersonation feature is vulnerable to a access control failure. This flaw allows any authenticated low-privileged user to execute a direct PATCH request, enabling them to impersonate any other arbitrary user, including application Administrators. This is due to a Broken Function Level Authorization failure (the function doesn't check the caller's privilege) compounded by an Insecure Design that permits a session switch without requiring the target user's password or an administrative token and only needs email of user."
    },
    {
      "lang": "es",
      "value": "El endpoint /api/V2/pp_udfv_admin de la API de Primakon Pi Portal 1.0.18 no realiza la validación necesaria del lado del servidor. La función administrativa de LoginAs o de suplantación de identidad de usuario es vulnerable a un fallo de control de acceso. Esta vulnerabilidad permite a cualquier usuario autenticado con bajos privilegios ejecutar una solicitud PATCH directa, lo que les permite suplantar la identidad de cualquier otro usuario arbitrario, incluidos los Administradores de la aplicación. Esto se debe a un fallo de autorización a nivel de función (Broken Function Level Authorization failure) (la función no verifica el privilegio del llamante) agravado por un Diseño Inseguro (Insecure Design) que permite un cambio de sesión sin requerir la contraseña del usuario objetivo o un token administrativo y solo necesita el correo electrónico del usuario."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "version": "n/a",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "baseScore": 8.8,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 5.9
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2025-11-26T14:33:59.790931Z",
          "id": "CVE-2025-64065",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-285"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:primakon:project_contract_management:1.0.18:*:*:*:*:*:*:*",
              "matchCriteriaId": "48EDD273-2C46-43C9-9473-27D2C14040CB"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/n3k7ar91/Vulnerabilites/blob/main/Primakon/CVE-2025-64065.md",
      "source": "[email protected]",
      "tags": [
        "Third Party Advisory"
      ]
    },
    {
      "url": "https://www.primakon.com/rjesenja/primakon-pcm/",
      "source": "[email protected]",
      "tags": [
        "Product"
      ]
    }
  ]
}