9.8
/ 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
QaTraq 6.9.2 ships with administrative account credentials which are enabled in default installations and permit immediate login via the web application login page. Because the account provides administrative privileges in the default configuration, an attacker who can reach the login page can gain administrative access.
AI Analysis
Default administrative account credentials in QaTraq 6.9.2 allow for immediate login and administrative access.
Basic Information
ID
CVE-2025-63747
Source
mitre
Published
Nov 17, 2025 at 00:00
Modified
Nov 17, 2025 at 19:42
Affected Product
Vendor
QaTraq
Product
QaTraq
Version
6.9.2
Affected Versions
n/a n/a n/a
CWE Classification
AI Assessment
AI Score
9.8 / 10
AI Severity
Critical
Vendor
QaTraq
Product
QaTraq
Version
6.9.2