Vulnerability · Published Feb 20, 2025 · Assigned by icscert
CVE-2025-0352Rapid Response Monitoring My Security Account App Authorization Bypass Through User-Controlled Key
High 7.5
In plain English
A high-severity authorization bypass via user-controlled key in My Security Account App API from Rapid Response Monitoring. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 30% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.4%top 70.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Rapid Response Monitoring My Security Account App utilizes an API that could be exploited by an attacker to modify request data, potentially causing the API to return information about other users.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Rapid Response Monitoring | My Security Account App API | 0 – before 7/29/24 |
Weakness: CWE-639 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N