Unauthorized File System Access in HP Application
CVE-2025-43024

5.1MEDIUM

Key Information:

Vendor

HP Inc

Status
Thinpro 8.1
Vendor
CVE Published:
27 October 2025

What is CVE-2025-43024?

An HP application contains a vulnerability where a GUI dialog improperly exposes access to the file system. This security flaw allows unauthorized users to view sensitive files, potentially leading to data breaches and exposure of confidential information. It's crucial for users to ensure their software is updated and to implement additional security measures to mitigate risks.

Affected Version(s)

ThinPro 8.1 Linux SP1

References

https://support.hp.com/us-en/document/ish_13164593-131646...

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-43024 : Unauthorized File System Access in HP Application