1. Home
  2. CVE Database
  3. CVE-2025-3722
MEDIUM · 4.4

CVE-2025-3722

A path traversal vulnerability in System Information Reporter (SIR) 1.0.3 and prior allowed an authenticated high privileged user to issue malicious ePO post requests to System Information Reporter,...

Vulnerability Description

A path traversal vulnerability in System Information Reporter (SIR) 1.0.3 and prior allowed an authenticated high privileged user to issue malicious ePO post requests to System Information Reporter, leading to creation of files anywhere on the filesystem and possibly overwriting existing files and exposing sensitive information disclosure.

CVSS Score

4.4

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
TrellixSystem Information Reporter<= 1.0.3

Related Weaknesses (CWE)

CWE-22

References

FAQ

What is CVE-2025-3722?

CVE-2025-3722 is a vulnerability with a CVSS score of 4.4 (MEDIUM). A path traversal vulnerability in System Information Reporter (SIR) 1.0.3 and prior allowed an authenticated high privileged user to issue malicious ePO post requests to System Information Reporter,...

How severe is CVE-2025-3722?

CVE-2025-3722 has been rated MEDIUM with a CVSS base score of 4.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-3722?

Check the references section above for vendor advisories and patch information. Affected products include: Trellix System Information Reporter.