Sensitive Information Exposure in Gmission Web Fax
CVE-2025-15070

6.8MEDIUM

Key Information:

Vendor

Gmission

Status
Web Fax
Vendor
CVE Published:
29 December 2025

What is CVE-2025-15070?

The Gmission Web Fax software suffers from a Missing Authorization vulnerability that can lead to exposure of sensitive information to unauthorized actors. This flaw allows malicious users to exploit the system and perform authentication abuse, thereby compromising user data. Affected users are advised to upgrade to version 4.0 or later to mitigate this risk.

Affected Version(s)

Web Fax 3.0 < 3.0.1

References

https://www.gmission.co.kr/fax1

CVSS V4

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.