CVE-2025-4378
Critical
Description
Cleartext Transmission of Sensitive Information, Use of Hard-coded Credentials vulnerability in Ataturk University ATA-AOF Mobile Application allows Authentication Abuse, Authentication Bypass. This issue affects ATA-AOF Mobile Application: before 20.06.2025.
SeverityCritical
CVSS10.0
Exploit probability—
ProductATA-AOF Mobile Application
PublishedJun 24, 2025
First seenJun 24, 2025
Weakness typeCWE-319CWE-319CWE-798Hard-coded credentials
How to fix
Update
- Ataturk University ATA-AOF Mobile Application20.06.2025 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Ataturk University ATA-AOF Mobile Application | v < 20.06.2025 | 20.06.2025 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.