CVE-2025-48027 - CVE House
Back to Database
Status published Medium CVE-2025-48027

The HttpAuth plugin in pGina.Fork through 3.9.9.12 allows authentication bypass...

Vulnerability Description

The HttpAuth plugin in pGina.Fork through 3.9.9.12 allows authentication bypass when an adversary controls DNS resolution for pginaloginserver.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-48027

Credits & Attribution

No credits recorded in the NVD database.

References

Affected Vendor

Affected Software

pGina.Fork
Vulnerable Versions:
0

Timeline

Official Publish: May 15th, 2025
Last Modified: May 15th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N

Weaknesses (CWE)

CWE-290

MITRE ATT&CK TTPs

T1557 Adversary-in-the-Middle
Collection
T1078 Valid Accounts
Persistence
T1550 Use Alternate Authentication Material
Defense Evasion
T1021 Remote Services
Lateral Movement
T1190 Exploit Public-Facing Application
Initial Access