CVE-2025-46576

There is a Permission Management and Access Control vulnerability in the GoldenDB database product. Attackers can manipulate requests to bypass privilege restrictions and delete content.

Score

CVSS 3.1 6.5 Medium

Status

Analyzed - psirt@zte.com.cn

Published

2025-04-27

Last modified

2025-04-28

Weaknesses

CWE-269

Affected products

• Goldendb (Zte)
• Zxcloud Goldendb (Zte)

References

• https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/1036467615091601464