Cleartext Transmission and Hard-coded Credentials in ATA-AOF Mobile Application by Ataturk University

CVE-2025-4378

What is CVE-2025-4378?

The ATA-AOF Mobile Application developed by Ataturk University has been found to have significant security vulnerabilities including the cleartext transmission of sensitive information and the use of hard-coded credentials. These issues can lead to authentication abuse and bypass, exposing users' data to potential interception by unauthorized entities. This vulnerability affects the application versions released before June 20, 2025, making it critical for users to update their applications and enhance their security posture to prevent exploitation.

References