← CVE Tracker
7.5HIGH

CVE-2025-41015 — User Enumeration Vulnerability in TCMAN GIM v11 version 20250304.

Tcman · Gim · Published 2 Dec 2025 · Modified 25 Sept 2026

Description

User Enumeration Vulnerability in TCMAN GIM v11 version 20250304. This vulnerability allows an unauthenticated attacker to determine whether a user exists on the system. The vulnerability is exploitable through the 'pda:username' parameter with 'soapaction GetUserQuestionAndAnswer' in '/WS/PDAWebService.asmx'.

References

What to do
  1. Check whether Gim is in your asset inventory.
  2. Patch in the next maintenance window; prioritise internet-facing systems.
  3. Record the decision in your risk register for audit evidence.
Alert me on similar CVEs →
Share

Link: adminadda.com/cve/CVE-2025-41015